Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMalicious code in @developmentyora/yorakids (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @developmentyora/baileyss (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in asistenyorstore (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @celestial-community/baileys (npm)Open the advisoryOct 16, 2026
- Medium5.4A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execu…Check if you run itEPSS 0.22%Oct 16, 2026
- High7.0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local auth…Check if you run itEPSS 0.10%Oct 16, 2026
- Medium6.8A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.Check if you run itEPSS 0.09%Oct 16, 2026
- Medium6.9A vulnerability was determined in bitcoinj up to 0.17.Check if you run itEPSS 0.29%Oct 16, 2026
- Unknownpython313-xhtml2pdf-0.2.24-1.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknownpython313-markdown2-2.5.5-2.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknownlibpcre2-16-0-10.49-2.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknownliboath-devel-2.6.15-1.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknownlibrecad-2.2.1.5-2.1 on GA mediaOpen the advisoryOct 16, 2026
- UnknownlibXtst-devel-1.2.5-3.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknownhawk2-2.7.2+git.1792148770.648dcddb-1.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknowngoogle-osconfig-agent-20261015.00-1.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknowndpdk-25.11.4-1.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknowncurl-8.23.0-1.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknowncoredns-1.14.7-3.1 on GA mediaOpen the advisoryOct 16, 2026
- Unknownalsa-1.2.16.1-3.1 on GA mediaOpen the advisoryOct 16, 2026
- High7.2The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium6.4Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer RoleCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.2The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter i…Check if you run itEPSS 0.25%Oct 16, 2026
- High8.1Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1.Check if you run itEPSS 0.26%Oct 16, 2026
- Medium6.4The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions…Check if you run itEPSS 0.21%Oct 16, 2026