Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…Check if you run itEPSS 1.04%Oct 13, 2026
- Medium5.3Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by…Check if you run itEPSS 0.24%Oct 13, 2026
- UnknownXSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations.Check if you run itEPSS 0.18%Oct 13, 2026
- Medium5.4openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers.Check if you run itEPSS 0.15%Oct 13, 2026
- Medium6.0FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrent…Check if you run itEPSS 0.23%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliCheck if you run itEPSS 0.26%Oct 13, 2026
- UnknownMalicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)Open the advisoryOct 13, 2026
- Medium6.8A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).Check if you run itEPSS 0.15%Oct 13, 2026
- High8.4A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G…Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.4Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint…Check if you run itEPSS 0.35%Oct 13, 2026
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality.Check if you run itEPSS 0.31%Oct 13, 2026
- Medium4.8The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one…Check if you run itEPSS 0.14%Oct 13, 2026
- UnknownMalicious code in monkey-tags-ip (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @newspage/lib-ng-async-routes-ui (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/workspaces-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui (npm)Open the advisoryOct 13, 2026
- HighMissing limits on resource use in the match expression evaluator of MongoDB Server can cause the server to consume excessive memory.Check if you run itEPSS 0.24%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.10%Oct 13, 2026
- Medium5.1Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a stored cross-site scripting vulnerability caused by record names being rendered without escaping.Open the advisoryOct 12, 2026
- High8.7Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creation endpoint that takes the record type from the…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.1Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization checks on operations that modify production records.Open the advisoryOct 12, 2026