Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerabilityCheck if you run itEPSS 0.15%Oct 15, 2026
- Critical9.8WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerabilityCheck if you run itEPSS 0.27%Oct 15, 2026
- Critical9.3WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerabilityCheck if you run itEPSS 0.24%Oct 15, 2026
- High7.1WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerabilityCheck if you run itEPSS 0.15%Oct 15, 2026
- UnknownCGA-xq7m-hmxx-h4fpOpen the advisoryOct 15, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 15, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 15, 2026
- UnknownSecurity update for muttOpen the advisoryOct 15, 2026
- High8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.8Important: hplip security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- Critical9.3ipv4: validate checksum_start before completing checksumPatch nowKEVEPSS 21.00%Oct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.8Important: kernel-rt security updateOpen the advisoryOct 15, 2026
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026
- High8.1Important: kernel security updateOpen the advisoryOct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.27%Oct 15, 2026
- Critical9.3WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityCheck if you run itEPSS 0.29%Oct 15, 2026
- High7.1WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityCheck if you run itEPSS 0.16%Oct 15, 2026
- High8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.Check if you run itEPSS 0.29%Oct 15, 2026
- Criticalipv4: free inet_opt and ireq_opt after an RCU grace periodCheck if you run itEPSS 0.17%Oct 15, 2026
- High7.3A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.Check if you run itEPSS 0.10%Oct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Open the advisoryOct 15, 2026
- MediumAn attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is curren…Check if you run itEPSS 0.26%Oct 15, 2026
- HighThe storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states.Check if you run itEPSS 0.32%Oct 15, 2026
- UnknownCVE-2026-63252 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.58%Oct 15, 2026