Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Ahsay AhsayCBS Improper Authentication VulnerabilityPatch nowKEVEPSS 79.24%Oct 4, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.35%Oct 4, 2026
- Medium6.4The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3…Check if you run itEPSS 0.18%Oct 3, 2026
- Low1.8ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an a…Check if you run itEPSS 0.11%Oct 3, 2026
- UnknownRejetto hfs2 Improper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 1.41%Oct 3, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issuePatch nowKEVEPSS 0.24%Oct 3, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 11.39%Oct 3, 2026
- Medium5.5Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret valuesCheck if you run itEPSS 0.13%Oct 2, 2026
- Critical10.0Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chainCheck if you run itEPSS 0.36%Oct 2, 2026
- High7.5Vibe-Trading file-read tools expose arbitrary server-readable filesCheck if you run itEPSS 0.43%Oct 2, 2026
- Critical10.0Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRFCheck if you run itEPSS 0.58%Oct 2, 2026
- Medium5.4Trigger.dev: Cross-environment deployment cancelCheck if you run itEPSS 0.22%Oct 2, 2026
- High7.7Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function nameCheck if you run itEPSS 0.28%Oct 2, 2026
- Medium5.3Trigger.dev: Unauthenticated Realtime Stream Data Injection via Run FriendlyIdCheck if you run itEPSS 0.27%Oct 2, 2026
- Critical9.2Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure CompromiseCheck if you run itEPSS 0.51%Oct 2, 2026
- Medium5.4Trigger.dev: Blind SSRF via alert-channel webhookCheck if you run itEPSS 0.24%Oct 2, 2026
- UnknownCVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker DistributionCheck if you run itEPSS 1.45%Oct 2, 2026
- UnknownCVE-2026-103958 is listed by CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS.Check if you run itEPSS 0.35%Oct 2, 2026
- UnknownCVE-2026-103957 is listed by CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS.Check if you run itEPSS 0.40%Oct 2, 2026
- UnknownCVE-2026-20273 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20272 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.57%Oct 2, 2026
- UnknownCVE-2026-20271 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20270 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20269 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
- UnknownCVE-2026-20268 is listed by Cisco IOS XE Software Security Hardening Release: August 2026.Check if you run itEPSS 0.47%Oct 2, 2026
Sort