Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A flaw was found in WildFly.Check if you run itEPSS 0.34%Oct 15, 2026
- UnknownCVE-2026-8311Open the advisoryOct 15, 2026
- UnknownCVE-2026-5819Open the advisoryOct 15, 2026
- High7.0A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.Check if you run itEPSS 0.29%Oct 15, 2026
- UnknownCVE-2026-2937Open the advisoryOct 15, 2026
- High8.6A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same l…Check if you run itEPSS 0.26%Oct 15, 2026
- UnknownCVE-2026-107316Open the advisoryOct 15, 2026
- UnknownCVE-2026-107172Open the advisoryOct 15, 2026
- UnknownCVE-2025-3778Open the advisoryOct 15, 2026
- Medium6.0A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to discl…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium5.9A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an a…Check if you run itEPSS 0.07%Oct 15, 2026
- High7.1BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed docum…Check if you run itEPSS 0.24%Oct 15, 2026
- High7.1CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders v…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium5.3SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other work…Check if you run itEPSS 0.26%Oct 15, 2026
- Critical9.1MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium5.3zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplyi…Check if you run itEPSS 0.28%Oct 15, 2026
- Low2.3crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers.Check if you run itEPSS 0.26%Oct 15, 2026
- Medium5.3Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by sup…Check if you run itEPSS 0.25%Oct 15, 2026
- High8.7ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin R…Check if you run itEPSS 0.36%Oct 15, 2026
- Low2.3metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass rol…Check if you run itEPSS 0.23%Oct 15, 2026
- Low2.3Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer…Check if you run itEPSS 0.25%Oct 15, 2026
- Medium6.9Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records vi…Check if you run itEPSS 0.29%Oct 15, 2026
- Medium5.3Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other cu…Check if you run itEPSS 0.22%Oct 15, 2026
- High8.2go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords.Check if you run itEPSS 0.38%Oct 15, 2026
- Medium5.3ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' commen…Check if you run itEPSS 0.24%Oct 15, 2026