Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownvanquish woocommerce_customers_manager Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.32%Oct 13, 2026
- High7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.36%Oct 12, 2026
- Critical9.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.Check if you run itEPSS 0.34%Oct 12, 2026
- High8.7Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creation endpoint that takes the record type from the…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.1Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission check…Check if you run itEPSS 0.22%Oct 12, 2026
- High7.1Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization checks on operations that modify production records.Open the advisoryOct 12, 2026
- High7.1Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper role-based autho…Open the advisoryOct 12, 2026
- High8.7Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated…Check if you run itEPSS 0.30%Oct 12, 2026
- Medium5.3Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operati…Check if you run itEPSS 0.20%Oct 12, 2026
- High7.1Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks.Open the advisoryOct 12, 2026
- High7.1Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation.Check if you run itEPSS 0.28%Oct 12, 2026
- High7.1Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation.Check if you run itEPSS 0.28%Oct 12, 2026
- High7.1Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks.Open the advisoryOct 12, 2026
- High7.1Frappe ERPNext before 16.14.0 contains a missing authorization vulnerability that allows authenticated users to modify master data beyond their permitted role.Check if you run itEPSS 0.22%Oct 12, 2026
- Medium5.3Frappe ERPNext before 15.105.0 and 16.x before 16.15.0 contains a missing authorization vulnerability in certain document creation endpoints that fail to verify that t…Open the advisoryOct 12, 2026
- High7.1Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to…Check if you run itEPSS 0.28%Oct 12, 2026
- High7.1Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper permission checks.Check if you run itEPSS 0.26%Oct 12, 2026
- High7.1Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints.Check if you run itEPSS 0.28%Oct 12, 2026
- High7.1Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce role-based authorization checks.Open the advisoryOct 12, 2026
- Medium5.3Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks.Check if you run itEPSS 0.19%Oct 12, 2026
- High7.1Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization ch…Open the advisoryOct 12, 2026
- High7.1Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation.Check if you run itEPSS 0.28%Oct 12, 2026
- High8.7Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation.Check if you run itEPSS 0.25%Oct 12, 2026
- Medium5.3Frappe before 15.113.3 and 16.x before 16.25.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks.Open the advisoryOct 12, 2026
- Medium5.9GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader.Check if you run itEPSS 0.15%Oct 12, 2026