Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter.Check if you run itEPSS 1.03%Oct 14, 2026
- Medium4.7The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.4The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field i…Check if you run itEPSS 0.25%Oct 14, 2026
- High7.2The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including,…Check if you run itEPSS 0.31%Oct 14, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityPatch nowKEVEPSS 1.57%Oct 14, 2026
- High8.5JVN#88474777: SiteGuard Server Edition vulnerable to OS command injectionPatch nowKEVEPSS 1.17%Oct 14, 2026
- Medium5.3External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".Patch nowKEVEPSS 0.22%Oct 14, 2026
- High8.6Palo Alto Networks PAN-OS Code Injection VulnerabilityPatch nowKEVEPSS 1.21%Oct 14, 2026
- UnknownCVE-2026-105151Open the advisoryOct 13, 2026
- UnknownCVE-2026-105142Open the advisoryOct 13, 2026
- UnknownCVE-2026-104922Open the advisoryOct 13, 2026
- High8.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.48%Oct 13, 2026
- Medium5.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.15%Oct 13, 2026
- High8.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.5IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause…Check if you run itEPSS 0.40%Oct 13, 2026
- Medium5.4blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.21%Oct 13, 2026
- High7.8Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.20%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.16%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.5Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.15%Oct 13, 2026
- Medium5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.5Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.15%Oct 13, 2026
- Medium5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.14%Oct 13, 2026
Sort