Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersCheck if you run itEPSS 0.28%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit WebhookCheck if you run itEPSS 0.11%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure WebhookCheck if you run itEPSS 0.11%Oct 15, 2026
- Medium5.3Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project SecretCheck if you run itEPSS 0.13%Oct 15, 2026
- Critical9.8Critical: idm:DL1 security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- UnknownWhen semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.Check if you run itEPSS 0.17%Oct 15, 2026
- Medium6.5Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin ResultCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.3eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template UpdateCheck if you run itEPSS 0.22%Oct 15, 2026
- UnknownSecurity update for the Java stackOpen the advisoryOct 15, 2026
- High7.2Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' ParameterCheck if you run itEPSS 0.29%Oct 15, 2026
- High7.2Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'Check if you run itEPSS 0.23%Oct 15, 2026
- Medium5.3A flaw was found in OpenSSH.Check if you run itEPSS 0.30%Oct 15, 2026
- Medium5.4A flaw was found in OpenSSH.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium6.1ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- Medium5.5ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- Medium5.5ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026