Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Koha is vulnerable to SQL injection in the Most-circulated items report.Check if you run itEPSS 0.28%Oct 14, 2026
- Medium5.3The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default conf…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium4.1The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existin…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private…Check if you run itEPSS 0.33%Oct 14, 2026
- Medium5.3The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to ret…Check if you run itEPSS 0.27%Oct 14, 2026
- High8.6The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and ve…Check if you run itEPSS 0.34%Oct 14, 2026
- Unknownlibyaml-perl vulnerabilitiesOpen the advisoryOct 14, 2026
- MediumCVE-2026-98428: ALSA: usb: 6fire: Avoid embedded URBsCheck if you run itEPSS 0.21%Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes from skcipher_walk…Check if you run itEPSS 0.21%Oct 14, 2026
- Medium5.3Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.28%Oct 13, 2026
- High8.1The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1.Check if you run itEPSS 0.54%Oct 13, 2026
- High7.5The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly veri…Check if you run itEPSS 0.53%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.69%Oct 13, 2026
- Medium6.5Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.81%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.84%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…Check if you run itEPSS 1.04%Oct 13, 2026
- High7.1Collection validators using collation-accepting expressions can crash MongoDB Server on insertCheck if you run itEPSS 0.24%Oct 13, 2026
- Unknownlinux vulnerabilitiesOpen the advisoryOct 13, 2026
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.Check if you run itEPSS 0.48%Oct 13, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).Check if you run itEPSS 0.39%Oct 13, 2026
- High8.7A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).Check if you run itEPSS 0.42%Oct 13, 2026
- Medium6.8A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).Check if you run itEPSS 0.15%Oct 13, 2026
- High8.7A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).Check if you run itEPSS 0.44%Oct 13, 2026
- Critical9.4Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.Check if you run itEPSS 0.41%Oct 13, 2026