Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Houzez.co Houzez houzez allows Reflected XSS.This issue affects H…Check if you run itEPSS 0.15%Oct 16, 2026
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.Patch nowKEVEPSS 0.98%Oct 16, 2026
- Critical9.8Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe componentCheck this weekEPSS 29.00%Oct 16, 2026
- Critical9.8Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious CodeOpen the advisoryOct 16, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.Patch nowKEVEPSS 0.00%Oct 16, 2026
- Critical9.8The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.Patch nowKEVEPSS 0.44%Oct 16, 2026
- Medium4.3Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update HookCheck if you run itEPSS 0.21%Oct 16, 2026
- Critical9.8LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' ParameterPatch nowKEVEPSS 0.44%Oct 16, 2026
- UnknownA heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a cra…Check if you run itEPSS 0.18%Oct 16, 2026
- High7.1A flaw was found in WildFly.Check if you run itEPSS 0.34%Oct 15, 2026
- UnknownCVE-2026-8311Open the advisoryOct 15, 2026
- UnknownCVE-2026-5819Open the advisoryOct 15, 2026
- High7.0A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.Check if you run itEPSS 0.29%Oct 15, 2026
- UnknownCVE-2026-2937Open the advisoryOct 15, 2026
- High8.6A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same l…Check if you run itEPSS 0.26%Oct 15, 2026
- UnknownCVE-2026-107316Open the advisoryOct 15, 2026
- UnknownCVE-2026-107172Open the advisoryOct 15, 2026
- UnknownCVE-2025-3778Open the advisoryOct 15, 2026
- Medium6.0A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to discl…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium5.9A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an a…Check if you run itEPSS 0.07%Oct 15, 2026
- High7.1BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed docum…Check if you run itEPSS 0.24%Oct 15, 2026
- High7.1CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders v…Check if you run itEPSS 0.20%Oct 15, 2026
- Medium5.3SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other work…Check if you run itEPSS 0.26%Oct 15, 2026
- Critical9.1MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium5.3zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplyi…Check if you run itEPSS 0.28%Oct 15, 2026