Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.Check if you run itEPSS 0.35%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- High7.1Incorrect authorization in MongoDB Server router for bulk writes to system namespacesCheck if you run itEPSS 0.24%Oct 13, 2026
- UnknownCVE-2026-103527 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.15%Oct 13, 2026
- UnknownCVE-2026-103526 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.20%Oct 13, 2026
- UnknownCVE-2026-103524 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.17%Oct 13, 2026
- UnknownCVE-2026-103523 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.19%Oct 13, 2026
- UnknownCVE-2026-103522 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.45%Oct 13, 2026
- UnknownCVE-2026-103521 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Check if you run itEPSS 0.47%Oct 13, 2026
- High7.1Collection validators using collation-accepting expressions can crash MongoDB Server on insertCheck if you run itEPSS 0.24%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.49%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicio…Check if you run itEPSS 0.45%Oct 13, 2026
- High7.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldCheck if you run itEPSS 0.22%Oct 13, 2026
- Medium5.8Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.Check if you run itEPSS 0.09%Oct 13, 2026
- Medium6.8Out-of-bounds write vulnerability in Citrix Workspace app for Windows.Check if you run itEPSS 0.11%Oct 13, 2026
- High7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.5Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication.Check if you run itEPSS 0.52%Oct 13, 2026
- Low3.7Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.8An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp.Check if you run itEPSS 0.14%Oct 13, 2026
- High8.7MediaAgent contained a heap-based buffer overflow issue affecting service availability.Check if you run itEPSS 0.32%Oct 13, 2026
- Critical9.3CVFS contained an input validation issue affecting command execution.Check if you run itEPSS 0.39%Oct 13, 2026