Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.80%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.25%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.78%Oct 13, 2026
- UnknownBeRocket advanced_ajax_product_filters Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.25%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.33%Oct 13, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 13, 2026
- UnknownCrocoblock jetengine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.14%Oct 13, 2026
- Unknownsquirrly seo_plugin_by_squirrly_seo Missing AuthorizationPatch nowKEVEPSS 0.17%Oct 13, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.28%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.94%Oct 13, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.32%Oct 13, 2026
- UnknownFunnelKit funnel_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Oct 13, 2026
- UnknownStylemixThemes masterstudy_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.26%Oct 13, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.87%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.28%Oct 13, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.44%Oct 13, 2026
- Unknownservmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.96%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 3.03%Oct 13, 2026
- UnknownWPDeveloper essential_addons_for_elementor Improper Privilege ManagementPatch nowKEVEPSS 0.38%Oct 13, 2026
- Unknownw3eden download_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Oct 13, 2026
- Unknownweplugins wp_maps Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Oct 13, 2026
Sort