Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-20826 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsrisiko durch Veröffentlichung von Informationen im Subsystem für die Benutzeroberfläche von…Check if you run itEPSS 0.30%Apr 13, 2026
- UnknownCVE-2026-20842 - Security Update Guide - Microsoft - Microsoft DWM Core Library Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.39%Apr 13, 2026
- UnknownCVE-2026-20847 – Leitfaden für Sicherheitsupdates – Microsoft - Microsoft Windows File Explorer-Spoofing-SicherheitsrisikoCheck if you run itEPSS 1.34%Apr 13, 2026
- UnknownCVE-2026-20809 – Leitfaden für Sicherheitsupdates – Microsoft - Sicherheitsrisiko durch Rechteerweiterungen im Windows-Kernel-SpeicherCheck if you run itEPSS 0.36%Apr 13, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.Check if you run itEPSS 0.15%Apr 13, 2026
- Low2.0A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to exeCheck if you run itEPSS 0.18%Apr 13, 2026
- High7.2An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthentiCheck if you run itEPSS 0.24%Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Check if you run itEPSS 0.20%Apr 13, 2026
- Critical9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely.Check if you run itEPSS 0.34%Apr 13, 2026
- High7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisitCheck if you run itEPSS 0.20%Apr 13, 2026
- High8.7A flaw has been found in TOTOLINK A7000R up to 9.1.0u.6115.Check if you run itEPSS 0.58%Apr 13, 2026
- Medium5.5A weakness has been identified in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium6.9A vulnerability was detected in code-projects Faculty Management System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium5.1Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.Check if you run itEPSS 0.08%Apr 13, 2026
- Critical10.0Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.Check if you run itEPSS 0.21%Apr 13, 2026
- Medium6.9A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- High8.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.37%Apr 13, 2026
- Medium6.8The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injection attacks posCheck if you run itEPSS 0.28%Apr 13, 2026
- Medium6.9A security flaw has been discovered in code-projects Lost and Found Thing Management 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium5.5A vulnerability was found in code-projects Simple ChatBox 1.0.Check if you run itEPSS 0.31%Apr 13, 2026
- Medium6.9A vulnerability was identified in code-projects Lost and Found Thing Management 1.0.Check if you run itEPSS 0.33%Apr 13, 2026
- High7.8Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.Check if you run itEPSS 0.11%Apr 13, 2026
- Medium5.1Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.Check if you run itEPSS 0.17%Apr 13, 2026
- High7.5Integer overflow or wraparound vulnerability in Samsung Open Source Escargot allows undefined behavior.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.1Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data.Check if you run itEPSS 0.09%Apr 13, 2026
Sort