Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownDuring Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing.Check if you run itEPSS 0.12%Oct 13, 2026
- Critical9.8An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.Check if you run itEPSS 0.52%Oct 13, 2026
- Medium6.9A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3.Check if you run itEPSS 0.38%Oct 13, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0.Check if you run itEPSS 0.35%Oct 13, 2026
- Medium5.5A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.31%Oct 13, 2026
- Medium5.5A flaw was found in BlueZ.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.3Plane is an open-source project management tool.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.29%Oct 13, 2026
- Medium4.7With its original introduction, GNTTAB_cache_flush was made available uniformly.Check if you run itEPSS 0.15%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with oCheck if you run itEPSS 0.29%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.51%Oct 13, 2026
- Medium6.1ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.8ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.Check if you run itEPSS 0.35%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.42%Oct 13, 2026
- High7.1Incorrect authorization in MongoDB Server router for bulk writes to system namespacesCheck if you run itEPSS 0.24%Oct 13, 2026
- UnknownCVE-2026-103527 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.20%Oct 13, 2026
- UnknownCVE-2026-103526 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.26%Oct 13, 2026
- UnknownCVE-2026-103524 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.23%Oct 13, 2026
- UnknownCVE-2026-103523 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.26%Oct 13, 2026
- UnknownCVE-2026-103522 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.58%Oct 13, 2026
- UnknownCVE-2026-103521 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.60%Oct 13, 2026
- High7.1Collection validators using collation-accepting expressions can crash MongoDB Server on insertCheck if you run itEPSS 0.24%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.52%Oct 13, 2026
Sort