Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Oct 13, 2026
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.66%Oct 13, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.39%Oct 13, 2026
- Unknownhashthemes hash_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknownbrainstormforce astra Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Oct 13, 2026
- Unknownkriesi enfold Improper Access ControlPatch nowKEVEPSS 0.33%Oct 13, 2026
- UnknownImportant: libreoffice security updateOpen the advisoryOct 13, 2026
- Medium6.5IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to…Check if you run itEPSS 0.31%Oct 12, 2026
- High7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.36%Oct 12, 2026
- High8.2IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.Check if you run itEPSS 0.35%Oct 12, 2026
- High8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.Check if you run itEPSS 0.34%Oct 12, 2026
- Medium5.3Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows…Open the advisoryOct 12, 2026
- High7.1Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks.Check if you run itEPSS 0.26%Oct 12, 2026
- High8.5Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages.Check if you run itEPSS 0.21%Oct 12, 2026
- Medium5.1Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a stored cross-site scripting vulnerability caused by record names being rendered without escaping.Open the advisoryOct 12, 2026
- High8.7Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creation endpoint that takes the record type from the…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.1Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission check…Check if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3Frappe ERPNext before 15.108.0 and 16.x before 16.18.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks.Open the advisoryOct 12, 2026
- Medium5.3Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public portal form that accepts unauthenticated submis…Check if you run itEPSS 0.21%Oct 12, 2026
- High7.1Frappe ERPNext before 15.116.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization ch…Check if you run itEPSS 0.26%Oct 12, 2026
- High7.1Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization checks on operations that modify production records.Open the advisoryOct 12, 2026
- Medium5.1Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit rights to inject script through a record name rende…Check if you run itEPSS 0.17%Oct 12, 2026
- High7.1Frappe ERPNext before 15.118.2 and 16.x before 16.30.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization c…Check if you run itEPSS 0.26%Oct 12, 2026
- High7.1Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper role-based autho…Open the advisoryOct 12, 2026