Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.Check if you run itEPSS 0.48%Oct 13, 2026
- Medium6.8A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).Check if you run itEPSS 0.15%Oct 13, 2026
- High8.4A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G…Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.4Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.Check if you run itEPSS 0.41%Oct 13, 2026
- Unknownpyjwt vulnerabilitiesOpen the advisoryOct 13, 2026
- Critical10.0The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases.Check this weekEPSS 39.00%Oct 13, 2026
- Medium4.3The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai…Check if you run itEPSS 0.24%Oct 13, 2026
- High7.2The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versio…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.2The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '…Check if you run itEPSS 0.24%Oct 13, 2026
- UnknownMalicious code in brass-common (npm)Open the advisoryOct 13, 2026
- High7.1The macOS version of the DigiD app is not signed with Hardened Runtime.Check if you run itEPSS 0.10%Oct 13, 2026
- Medium5.5A weakness has been identified in SourceCodester Performance Indicator System 1.0.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint…Check if you run itEPSS 0.35%Oct 13, 2026
- Medium5.3A flaw has been found in PaddlePaddle PaddleX up to 3.7.2.Check if you run itEPSS 0.40%Oct 13, 2026
- Medium5.3In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on " suffix after the host address.Check if you run itEPSS 0.31%Oct 13, 2026
- Low2.1A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0.Check if you run itEPSS 0.20%Oct 13, 2026
- Low2.1A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b.Check if you run itEPSS 0.24%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…Check if you run itEPSS 0.13%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.16%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.16%Oct 13, 2026
- High7.1OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser.Check if you run itEPSS 0.13%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.18%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditio…Check if you run itEPSS 0.18%Oct 13, 2026