Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Oct 13, 2026
- Medium5.5Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform t…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an aut…Check if you run itEPSS 0.20%Oct 13, 2026
- High7.5Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High7.4Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing VulnerabilityCheck if you run itEPSS 0.58%Oct 13, 2026
- High8.1Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vul…Check if you run itEPSS 0.90%Oct 13, 2026
- High8.7Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln…Check if you run itEPSS 0.86%Oct 13, 2026
- High7.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.75%Oct 13, 2026
- High8.8Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.Open the advisoryOct 13, 2026
- Medium6.8Distribution: Client does not verify returned content against requested digestCheck if you run itEPSS 0.21%Oct 13, 2026
- Medium5.3Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check N…Check if you run itEPSS 0.25%Oct 13, 2026
- High8.6A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunder…Check if you run itEPSS 0.17%Oct 13, 2026
- High8.4Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks.Check if you run itEPSS 0.17%Oct 13, 2026
- Low2.1Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML with…Check if you run itEPSS 0.24%Oct 13, 2026
- High8.7Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify…Check if you run itEPSS 0.46%Oct 13, 2026
- High7.0KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into theCheck if you run itEPSS 1.02%Oct 13, 2026
- Medium4.1Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predi…Check if you run itEPSS 0.14%Oct 13, 2026
- High8.4Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names.Check if you run itEPSS 1.15%Oct 13, 2026
- Medium5.3QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slip…Check if you run itEPSS 0.26%Oct 13, 2026
- Medium5.1wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocke…Check if you run itEPSS 0.25%Oct 13, 2026
- Low2.7Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbCheck if you run itEPSS 0.30%Oct 13, 2026
- Low2.3Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebinding or…Check if you run itEPSS 0.28%Oct 13, 2026
- Medium6.9Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC c…Check if you run itEPSS 0.32%Oct 13, 2026
- Medium6.3Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-fac…Check if you run itEPSS 0.36%Oct 13, 2026