Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a networkCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.31%Oct 13, 2026
- Medium6.5An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.31%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.29%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.34%Oct 13, 2026
- Critical9.4An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal acc…Check if you run itEPSS 0.41%Oct 13, 2026
- High8.8An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.32%Oct 13, 2026
- High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…Check if you run itEPSS 1.04%Oct 13, 2026
- High7.8Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.7Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.7Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.86%Oct 13, 2026
- Critical10.0Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context ofCheck if you run itEPSS 0.84%Oct 13, 2026
- Critical9.1Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.75%Oct 13, 2026
- High8.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.60%Oct 13, 2026
- Critical9.8Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.64%Oct 13, 2026
- Critical9.0Potential arbitrary code execution, under specific configurations.Check if you run itEPSS 0.34%Oct 13, 2026
- Medium5.5A flaw was found in BusyBox's mount utility.Check if you run itEPSS 0.11%Oct 13, 2026
- Low3.7A flaw was found in BusyBox's httpd web server.Check if you run itEPSS 0.22%Oct 13, 2026
- Medium6.5A flaw was found in BusyBox's udhcpc DHCP client.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.8Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai…Check if you run itEPSS 1.31%Oct 13, 2026
- Critical9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.72%Oct 13, 2026
- Critical9.8A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.1Frappe is a full-stack web application framework.Check if you run itEPSS 0.42%Oct 13, 2026
- High8.5Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.Check if you run itEPSS 0.15%Oct 13, 2026
Sort