Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.39%Oct 13, 2026
- Medium4.7Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.0Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- High8.8Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High8.1Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.71%Oct 13, 2026
- High7.8Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.28%Oct 13, 2026
- High7.0Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.25%Oct 13, 2026
- High7.8Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.47%Oct 13, 2026
- High7.0Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Oct 13, 2026
- High7.0Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Oct 13, 2026
- High7.0Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.26%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.94%Oct 13, 2026
- High7.0VNote is a note-taking platform.Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.8The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all ve…Check if you run itEPSS 0.85%Oct 13, 2026
- Critical9.1The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_…Check if you run itEPSS 0.53%Oct 13, 2026
- Medium4.3Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator.Check if you run itEPSS 0.23%Oct 13, 2026
- Medium5.1Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.9Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.1The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1.Check if you run itEPSS 0.54%Oct 13, 2026
- Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.Check if you run itEPSS 1.24%Oct 13, 2026
- Medium5.3The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1.Check if you run itEPSS 0.31%Oct 13, 2026
- High8.1The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the cl…Check if you run itEPSS 0.85%Oct 13, 2026
- High7.5The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.5The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execu…Check if you run itEPSS 0.54%Oct 13, 2026
- Medium6.4The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insuff…Check if you run itEPSS 0.26%Oct 13, 2026
Sort