Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.10%Oct 13, 2026
- Medium6.8A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).Check if you run itEPSS 0.15%Oct 13, 2026
- High8.7A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).Check if you run itEPSS 0.44%Oct 13, 2026
- High7.2The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versio…Check if you run itEPSS 0.25%Oct 13, 2026
- Critical10.0The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.Check if you run itEPSS 0.27%Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.Check if you run itEPSS 0.37%Oct 13, 2026
- High8.7The network messaging layer contained improper handling of highly compressed data affecting service availability.Check if you run itEPSS 0.36%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityPatch nowKEVEPSS 1.51%Oct 13, 2026
- MediumUse of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released.Check if you run itEPSS 0.22%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 1.06%Oct 13, 2026
- Unknownw3eden download_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.71%Oct 13, 2026
- Unknownninjaforms ninja_forms_file_uploads Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.60%Oct 13, 2026
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- Unknowndavidlingren media_library_assistant Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.36%Oct 13, 2026
- High7.4IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM b…Check if you run itEPSS 0.14%Oct 12, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.18%Oct 12, 2026
- Critical9.1NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adj…Check if you run itEPSS 0.15%Oct 12, 2026
- High7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.Check if you run itEPSS 0.08%Oct 12, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.33%Oct 12, 2026
- Medium5.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration end…Check if you run itEPSS 0.14%Oct 12, 2026
- Medium6.9Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access…Check if you run itEPSS 0.26%Oct 12, 2026
- High8.5Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute script in victims' sessions by storing ja…Check if you run itEPSS 0.28%Oct 12, 2026
- High8.2FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure.Check if you run itEPSS 0.32%Oct 12, 2026
- Medium6.0FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a realloc failure.Check if you run itEPSS 0.26%Oct 12, 2026