Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserCheck if you run itEPSS 0.12%Oct 16, 2026
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsCheck if you run itEPSS 0.26%Oct 16, 2026
- High7.3FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3Check if you run itEPSS 0.13%Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserCheck if you run itEPSS 0.33%Oct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyCheck if you run itEPSS 0.25%Oct 16, 2026
- Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZECheck if you run itEPSS 0.14%Oct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleCheck if you run itEPSS 0.20%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestCheck if you run itEPSS 0.24%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingCheck if you run itEPSS 0.25%Oct 16, 2026
- UnknownMalicious code in xmd-baileys (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @developmentyora/yorakids (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @developmentyora/baileyss (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in asistenyorstore (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @celestial-community/baileys (npm)Open the advisoryOct 16, 2026
- High7.0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local auth…Check if you run itEPSS 0.10%Oct 16, 2026
- High7.2The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.24%Oct 16, 2026
- Medium6.4Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer RoleCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.2The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter i…Check if you run itEPSS 0.25%Oct 16, 2026
- Medium4.3Arcane: Environment access token bypasses the admin-required authorization gate onCheck if you run itEPSS 0.20%Oct 16, 2026
- High8.8Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)Check if you run itEPSS 0.29%Oct 16, 2026
- High7.2The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to…Check if you run itEPSS 0.31%Oct 16, 2026
- Medium6.5The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1.Check if you run itEPSS 0.28%Oct 16, 2026
- Low3.1ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)Open the advisoryOct 16, 2026
- Low3.7CoreDNS headless AXFR can emit an empty transfer batch that panics the pluginCheck if you run itEPSS 0.46%Oct 16, 2026
- Medium6.5Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destinationCheck if you run itEPSS 0.17%Oct 16, 2026