Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.20%Oct 13, 2026
- High8.8SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query.Check if you run itEPSS 0.45%Oct 13, 2026
- Critical10.0The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications.Check if you run itEPSS 0.37%Oct 13, 2026
- Critical9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.Check if you run itEPSS 0.40%Oct 13, 2026
- Critical9.9SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scri…Check if you run itEPSS 0.48%Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.Check if you run itEPSS 0.37%Oct 13, 2026
- Medium4.8A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2.Check if you run itEPSS 0.14%Oct 13, 2026
- Low2.4A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041.Check if you run itEPSS 0.12%Oct 13, 2026
- Low1.9A weakness has been identified in ModelTC LightX2V up to 0.5.0.Check if you run itEPSS 0.19%Oct 13, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.Check if you run itEPSS 0.19%Oct 13, 2026
- High8.1IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium5.9The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.7The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.8The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one…Check if you run itEPSS 0.14%Oct 13, 2026
- Medium4.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.Check if you run itEPSS 0.08%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.Check if you run itEPSS 0.28%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.5IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.Check if you run itEPSS 0.14%Oct 13, 2026
- Low2.4A vulnerability was identified in Linketic CityGaussian up to 2.0.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.5A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3.Check if you run itEPSS 0.69%Oct 13, 2026
- Medium5.5A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3.Check if you run itEPSS 0.47%Oct 13, 2026
- MediumThe GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in versions up to, a…Check if you run itEPSS 0.21%Oct 13, 2026
- MediumThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all versions up to, and incl…Check if you run itEPSS 0.23%Oct 13, 2026
- MediumThe Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all version…Check if you run itEPSS 0.19%Oct 13, 2026
- MediumThe SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function.Check if you run itEPSS 0.71%Oct 13, 2026
Sort