Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file .Check if you run itEPSS 0.10%Oct 13, 2026
- High7.1AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access.Check if you run itEPSS 0.11%Oct 13, 2026
- High8.2AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.3AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- Low2.1A vulnerability has been found in code-projects Online Reviewer System 1.0.Check if you run itEPSS 0.27%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.83%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.71%Oct 13, 2026
- Unknowndynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Oct 13, 2026
- Low2.1A vulnerability was found in Netcore NR268 1.7.121109.Check if you run itEPSS 0.26%Oct 12, 2026
- Medium5.3MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files…Check if you run itEPSS 0.20%Oct 12, 2026
- UnknownMalicious code in minecraftaccfinder (PyPI)Open the advisoryOct 12, 2026
- UnknownMalicious code in @s4yhiitestpoc/r3-https (npm)Open the advisoryOct 11, 2026
- High8.6Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients w…Open the advisoryOct 11, 2026
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Open the advisoryOct 11, 2026
- UnknownMalicious code in ton-jetton-tools (RubyGems)Open the advisoryOct 11, 2026
- High7.1ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pan…Open the advisoryOct 11, 2026
- Medium5.3JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sy…Check if you run itEPSS 0.24%Oct 10, 2026
- UnknownMalicious code in media-manager5 (PyPI)Open the advisoryOct 10, 2026
- Low3.5Contao: Cross-site request forgery in custom backend actionsCheck if you run itEPSS 0.11%Oct 9, 2026
- UnknownMalicious code in bungoma (npm)Open the advisoryOct 9, 2026
- High7.5Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module.Check if you run itEPSS 0.33%Oct 9, 2026
- High8.2Reusing a Nonce, Key Pair in EncryptionCheck if you run itEPSS 0.41%Oct 9, 2026
- Criticaltheme-fusion avada_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.43%Oct 9, 2026
- High8.7TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predict…Check if you run itEPSS 0.20%Oct 8, 2026
- HighHTTP/2 transport accepts malformed framing-related headers in net/httpCheck if you run itEPSS 0.30%Oct 8, 2026