Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.14%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.54%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.Check if you run itEPSS 0.40%Oct 15, 2026
- High8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.Check if you run itEPSS 0.22%Oct 15, 2026
- Critical9.4An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64Check if you run itEPSS 0.23%Oct 15, 2026
- High7.1An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizCheck if you run itEPSS 0.09%Oct 15, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.Check if you run itEPSS 0.36%Oct 15, 2026
- Medium4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter.Check if you run itEPSS 0.11%Oct 15, 2026
- Medium4.3Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersCheck if you run itEPSS 0.28%Oct 15, 2026
- Critical9.8Critical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- Critical9.8User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration HandlerCheck if you run itEPSS 0.28%Oct 15, 2026
- Medium4.2Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL RewriteCheck if you run itEPSS 0.14%Oct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentCheck if you run itEPSS 0.19%Oct 15, 2026
- Critical9.5In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific…Check if you run itEPSS 0.23%Oct 15, 2026
- High8.7MoviePilot 3.1.5 Command Injection via ExecuteCommandToolCheck if you run itEPSS 1.00%Oct 15, 2026
- Unknownninjaforms ninja_forms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Oct 15, 2026
- UnknownNginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enableCheck if you run itEPSS 0.21%Oct 15, 2026
- UnknownNginx UI: Account Takeover via Missing on User Management EndpointCheck if you run itEPSS 0.33%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- High7.5An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface.Check if you run itEPSS 0.34%Oct 15, 2026
- High8.8ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.U…Check if you run itEPSS 0.30%Oct 15, 2026
- High8.1Improper AuthenticationPatch nowKEVEPSS 0.43%Oct 15, 2026
- UnknownCritical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026