Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' ParametersCheck if you run itEPSS 0.29%Oct 16, 2026
- High7.5CGA-xvxr-hg4h-7xv6Open the advisoryOct 16, 2026
- High7.5Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' ParameterCheck if you run itEPSS 0.40%Oct 16, 2026
- Critical9.1Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts CounterCheck if you run itEPSS 0.40%Oct 16, 2026
- Medium6.1Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflected Cross-Site Scripting via 'token_id' ParameterCheck if you run itEPSS 0.23%Oct 16, 2026
- High7.2Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Object Injection via Deserialization of Untrusted Input via ZIP Template ImportCheck if you run itEPSS 0.47%Oct 16, 2026
- Critical9.9CGA-xrx3-ffmv-978rOpen the advisoryOct 16, 2026
- High7.5CGA-xw25-hf4r-rr6qOpen the advisoryOct 16, 2026
- High7.5CGA-xh9g-g93q-wwv4Open the advisoryOct 16, 2026
- High7.5CGA-xhr2-fc8v-2ggjOpen the advisoryOct 16, 2026
- UnknownCGA-wh82-3g67-m3mxOpen the advisoryOct 16, 2026
- High7.4CGA-xj5r-x3hx-xr2qOpen the advisoryOct 16, 2026
- UnknownCGA-x3x9-26v7-f53xOpen the advisoryOct 16, 2026
- High7.5CGA-xhxm-4c5q-c88cOpen the advisoryOct 16, 2026
- UnknownSecurity update for glib2Open the advisoryOct 16, 2026
- High7.5CGA-xwvc-2fc9-4c48Open the advisoryOct 16, 2026
- UnknownSecurity update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)Open the advisoryOct 16, 2026
- Critical9.6An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header iCheck this weekEPSS 29.00%Oct 16, 2026
- High7.5CGA-xvh8-wgqq-5f2wOpen the advisoryOct 16, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 16, 2026
- UnknownSecurity update for python-urllib3Open the advisoryOct 16, 2026
- UnknownSecurity update for libsoup2Open the advisoryOct 16, 2026
- High7.5CGA-xx9v-9p79-p3ffOpen the advisoryOct 16, 2026
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin.Open the advisoryOct 16, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Apache Kylin.Open the advisoryOct 16, 2026