Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.44%Oct 15, 2026
- Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.51%Oct 15, 2026
- Medium6.5Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.51%Oct 15, 2026
- Medium6.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.51%Oct 15, 2026
- High7.8Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.Check if you run itEPSS 0.32%Oct 15, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Oct 15, 2026
- High8.8Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Oct 15, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Oct 15, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Oct 15, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.45%Oct 15, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.46%Oct 15, 2026
- High8.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.44%Oct 15, 2026
- Medium4.6Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium5.4Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.4Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryCheck if you run itEPSS 0.18%Oct 15, 2026
- Medium4.7Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryCheck if you run itEPSS 0.13%Oct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserCheck if you run itEPSS 0.17%Oct 15, 2026
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Contro…Check if you run itEPSS 0.27%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.…Check if you run itEPSS 0.13%Oct 15, 2026
- High8.4Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a…Check if you run itEPSS 0.16%Oct 15, 2026