Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCGA-j746-7jp3-53m7Open the advisoryOct 9, 2026
- UnknownCGA-7j73-p6c7-jc7pOpen the advisoryOct 9, 2026
- UnknownCGA-prm4-j4f6-r2mgOpen the advisoryOct 9, 2026
- UnknownCGA-5vh8-4h67-m34fOpen the advisoryOct 9, 2026
- UnknownCGA-35vx-hcw9-ppprOpen the advisoryOct 9, 2026
- UnknownCGA-f9cm-mcmx-xchcOpen the advisoryOct 9, 2026
- UnknownCGA-hgv7-q423-vmvgOpen the advisoryOct 9, 2026
- Criticaltheme-fusion avada_builder Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.46%Oct 9, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.86%Oct 9, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.30%Oct 9, 2026
- UnknownCVE-2026-97032 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 8, 2026
- UnknownCVE-2026-97032 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- Critical10.0Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.67%Oct 8, 2026
- UnknownCVE-2026-97030 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 8, 2026
- UnknownCVE-2026-97030 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.23%Oct 8, 2026
- Medium6.5Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.53%Oct 8, 2026
- UnknownCVE-2026-94439 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 8, 2026
- UnknownCVE-2026-78667 affecting package gcc 13.2.0-7Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package golang 1.26.7-1Open the advisoryOct 8, 2026
- High8.1Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.56%Oct 8, 2026
- High8.7TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predict…Check if you run itEPSS 0.27%Oct 8, 2026
- High8.7TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443.Check if you run itEPSS 0.34%Oct 8, 2026
Sort