Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.Check if you run itEPSS 0.31%Oct 13, 2026
- Critical9.9SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scri…Check if you run itEPSS 0.37%Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.Check if you run itEPSS 0.37%Oct 13, 2026
- Medium4.8A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2.Check if you run itEPSS 0.14%Oct 13, 2026
- Low2.4A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041.Check if you run itEPSS 0.12%Oct 13, 2026
- Low1.9A weakness has been identified in ModelTC LightX2V up to 0.5.0.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.Check if you run itEPSS 0.19%Oct 13, 2026
- High8.1IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.Check if you run itEPSS 0.48%Oct 13, 2026
- Medium5.9The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.7The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.8The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one…Check if you run itEPSS 0.14%Oct 13, 2026
- Medium4.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.Check if you run itEPSS 0.28%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.5IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.Check if you run itEPSS 0.14%Oct 13, 2026
- Low2.4A vulnerability was identified in Linketic CityGaussian up to 2.0.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.5A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3.Check if you run itEPSS 0.59%Oct 13, 2026
- Medium5.5A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3.Check if you run itEPSS 0.47%Oct 13, 2026
- High8.7The network messaging layer contained improper handling of highly compressed data affecting service availability.Check if you run itEPSS 0.36%Oct 13, 2026
- High7.1QAPI contained a stack-based buffer overflow affecting service availability.Check if you run itEPSS 0.24%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityPatch nowKEVEPSS 1.51%Oct 13, 2026
- Medium5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.Check if you run itEPSS 0.23%Oct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…Check if you run itEPSS 0.52%Oct 13, 2026
- High7.5Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundle…Check if you run itEPSS 0.49%Oct 13, 2026
- Low3.8A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requestsCheck if you run itEPSS 0.21%Oct 13, 2026
Sort