Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.37%Oct 15, 2026
- High7.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.37%Oct 15, 2026
- Low2.3A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.27%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.27%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.27%Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.Check if you run itEPSS 0.11%Oct 15, 2026
- Medium6.5TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.Check if you run itEPSS 0.41%Oct 15, 2026
- Medium4.4Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.Check if you run itEPSS 0.10%Oct 15, 2026
- Medium4.4Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.Check if you run itEPSS 0.10%Oct 15, 2026
- UnknownSCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.Check if you run itEPSS 0.27%Oct 15, 2026
- Unknownrenameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.Check if you run itEPSS 0.42%Oct 15, 2026
- UnknownMultiple jail filesystem root escapesCheck if you run itEPSS 0.18%Oct 15, 2026
- High8.8The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.Check if you run itEPSS 0.47%Oct 15, 2026
- Medium4.3Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersCheck if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit WebhookCheck if you run itEPSS 0.11%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure WebhookCheck if you run itEPSS 0.11%Oct 15, 2026
- Medium5.3Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project SecretCheck if you run itEPSS 0.13%Oct 15, 2026
- High8.2A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.3A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.Check if you run itEPSS 0.08%Oct 15, 2026
- Unknownkqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.Check if you run itEPSS 0.14%Oct 15, 2026
- UnknownMemory safety bugs in kqueue copy-on-fork implementationCheck if you run itEPSS 0.14%Oct 15, 2026
- UnknownWhen semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.Check if you run itEPSS 0.17%Oct 15, 2026
- High7.5Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content OverwriteCheck if you run itEPSS 0.21%Oct 15, 2026
- Critical9.8User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration HandlerCheck if you run itEPSS 0.28%Oct 15, 2026
- Medium6.5Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin ResultCheck if you run itEPSS 0.16%Oct 15, 2026