Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.5libp2p is a JavaScript implementation of the libp2p networking stack.Vuln · CVE-2026-103936 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Oct 15, 2026
Medium5.3Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.Vuln · CVE-2026-103350 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%Oct 15, 2026
Medium5.8The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses.Vuln · CVE-2026-102740 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 15, 2026
Medium6.3ammonia is a Rust library for repairing and securing untrusted HTML.Vuln · CVE-2026-63430 · rust-ammonia · ammonia · CVE.org · FIRST EPSS · NIST NVD · Debian, Debian 12EPSS 0.6%Oct 15, 2026
Medium5.3WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerabilityVuln · CVE-2026-96449 · WPExperts · WP EasyPay · CVE.org · NIST NVD · Tenable CVE Database · WordPressOct 15, 2026
Medium5.3NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.Vuln · CVE-2026-55414 · nl-portal · nl-portal-backend-libraries · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
Medium4.3Helium is a free online student planner for classes, homework, grades, and notes.Vuln · CVE-2026-55875 · HeliumEdu · platform · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Low3.5Helium is a free online student planner for classes, homework, grades, and notes.Vuln · CVE-2026-55876 · HeliumEdu · platform · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
High8.8A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments.Vuln · CVE-2026-85634 · CVE.org · FIRST EPSS · NIST NVD · JBossEPSS 0.4%Oct 15, 2026
Medium6.5Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.Vuln · CVE-2026-78851 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 1.1%Oct 15, 2026
Medium5.0An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager componentVuln · CVE-2026-78850 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 15, 2026
High8.3Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-77470 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Oct 15, 2026
Medium6.9Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-77468 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
High7.1Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-77467 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 15, 2026
High8.3Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-77466 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
High8.9Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-62679 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
High8.2Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-61838 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
High7.5Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-61611 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
Low2.3Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-61610 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Low2.3Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-57569 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 15, 2026
Medium5.7Lychee is a free, open-source photo-management tool.Vuln · CVE-2026-57568 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 15, 2026
Critical9.4Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database…Vuln · CVE-2026-110812 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 15, 2026
High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore xstore allows Reflected XSS.This issue affects…Vuln · CVE-2026-105065 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 15, 2026
Medium5.9In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back…Vuln · CVE-2026-102631 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Oct 15, 2026
Critical9.3Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOSVuln · CVE-2026-84731 · Nutanix · Acropolis Operating System (AOS) · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 1.3%Oct 15, 2026