Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- Critical9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.79%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.84%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- Critical9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.72%Oct 13, 2026
- High7.7Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and sk…Check if you run itEPSS 0.12%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- Low2.3A security vulnerability has been detected in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.25%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityCheck if you run itEPSS 0.85%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.56%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.80%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.64%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.67%Oct 13, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.18%Oct 12, 2026
- High8.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.43%Oct 12, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesCheck if you run itEPSS 0.22%Oct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026
- LowImproper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine ruCheck if you run itEPSS 0.33%Oct 12, 2026
- Critical9.1ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the targetOpen the advisoryOct 10, 2026
- UnknownMalicious code in passwordcracker (npm)Open the advisoryOct 10, 2026
- UnknownMalicious code in passwordcrackv2 (npm)Open the advisoryOct 9, 2026
- High7.2Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set.Open the advisoryOct 9, 2026
- UnknownMalicious code in bungoma (npm)Open the advisoryOct 9, 2026