Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default).Check if you run itEPSS 0.21%Oct 16, 2026
- Low3.7Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems.Check if you run itEPSS 0.21%Oct 16, 2026
- High8.6Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development.Check if you run itEPSS 0.26%Oct 16, 2026
- Medium6.5Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-…Check if you run itEPSS 0.16%Oct 16, 2026
- Medium5.3Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags.Check if you run itEPSS 0.23%Oct 16, 2026
- Medium4.8The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2.Check if you run itEPSS 0.26%Oct 16, 2026
- High8.8FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineCheck if you run itEPSS 0.29%Oct 16, 2026
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsCheck if you run itEPSS 0.26%Oct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyCheck if you run itEPSS 0.25%Oct 16, 2026
- Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZECheck if you run itEPSS 0.14%Oct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleCheck if you run itEPSS 0.20%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestCheck if you run itEPSS 0.24%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingCheck if you run itEPSS 0.25%Oct 16, 2026
- High7.0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local auth…Check if you run itEPSS 0.10%Oct 16, 2026
- Medium6.4Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant to Customer RoleCheck if you run itEPSS 0.19%Oct 16, 2026
- Critical9.2Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionCheck if you run itEPSS 0.58%Oct 16, 2026
- Low3.3ClickMigrate has Path Traversal in "revision -m" argumentOpen the advisoryOct 16, 2026
- Low3.7CoreDNS headless AXFR can emit an empty transfer batch that panics the pluginCheck if you run itEPSS 0.46%Oct 16, 2026
- High7.5JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoSCheck if you run itEPSS 0.34%Oct 16, 2026
- High7.1JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticat…Check if you run itEPSS 0.30%Oct 15, 2026
- High8.3snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an u…Check if you run itEPSS 0.43%Oct 15, 2026
- High8.7Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRAN…Check if you run itEPSS 0.48%Oct 15, 2026
- Medium6.9nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a fi…Check if you run itEPSS 0.84%Oct 15, 2026
- Medium5.1Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver:…Check if you run itEPSS 0.81%Oct 15, 2026