Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…Check if you run itEPSS 0.16%Oct 5, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0Check if you run itEPSS 0.27%Oct 5, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0Check if you run itEPSS 0.09%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4Check if you run itEPSS 0.29%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0Check if you run itEPSS 0.10%Oct 5, 2026
- High8.7Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8Check if you run itEPSS 0.37%Oct 5, 2026
- Critical9.3Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16Check if you run itEPSS 0.47%Oct 5, 2026
- UnknownCVE-2026-105301Open the advisoryOct 5, 2026
- Medium6.7In venc, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to a missing bounds check.Check if you run itEPSS 0.11%Oct 5, 2026
- Medium6.7In mtee, there is a possible escalation of privilege due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- High8.8In vdec, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.39%Oct 5, 2026
- Medium6.7In vdec, there is a possible out of bounds write due to type confusion.Check if you run itEPSS 0.11%Oct 5, 2026
- Critical9.3Ahsay AhsayCBS Command Injection VulnerabilityPatch nowKEVEPSS 86.27%Oct 4, 2026
- Medium5.5Ahsay AhsayCBS Improper Authentication VulnerabilityPatch nowKEVEPSS 79.24%Oct 4, 2026
- Medium6.4The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3…Check if you run itEPSS 0.18%Oct 3, 2026
- Low1.8ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an a…Check if you run itEPSS 0.11%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 11.39%Oct 3, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 2.75%Oct 2, 2026
- High7.1Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object ResolutionCheck if you run itEPSS 0.31%Oct 2, 2026
- UnknownCVE-2026-64818Open the advisoryOct 2, 2026
- High8.7An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus sessi…Check if you run itEPSS 0.50%Oct 2, 2026
- High8.7In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with the top b…Check if you run itEPSS 0.42%Oct 2, 2026
- High7.6Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by sup…Check if you run itEPSS 0.29%Oct 1, 2026
- High8.4Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an…Check if you run itEPSS 0.13%Oct 1, 2026
Sort