Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- HighIBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.Check if you run itEPSS 0.18%Oct 13, 2026
- HighAn issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.cCheck if you run itEPSS 0.26%Oct 13, 2026
- High7.5Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundle…Check if you run itEPSS 0.49%Oct 13, 2026
- Highmp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp.Check if you run itEPSS 0.52%Oct 13, 2026
- Unknownwpusermanager wp_user_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.73%Oct 13, 2026
- Unknownthimpress learnpress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.28%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%Oct 13, 2026
- UnknownThemeum tutor_lms Deserialization of Untrusted DataPatch nowKEVEPSS 1.07%Oct 13, 2026
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 0.64%Oct 13, 2026
- Critical9.1Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.83%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 0.85%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.46%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 1.06%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.56%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.64%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.80%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70162 - .NET Denial of Service VulnerabilityCheck if you run itEPSS 0.77%Oct 13, 2026
- UnknownMicrosoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 1.06%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.64%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.10%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.67%Oct 13, 2026
- UnknownBeRocket advanced_ajax_product_filters Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 1.10%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.33%Oct 13, 2026