Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation.Check if you run itEPSS 0.47%Oct 13, 2026
- Critical9.3Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.72%Oct 13, 2026
- Critical9.9Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gainiCheck if you run itEPSS 0.57%Oct 13, 2026
- Critical10.0Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gainiCheck if you run itEPSS 0.82%Oct 13, 2026
- Critical10.0Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gainiCheck if you run itEPSS 0.82%Oct 13, 2026
- High7.1Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.44%Oct 13, 2026
- Critical9.3Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fieldCheck if you run itEPSS 0.68%Oct 13, 2026
- Critical9.3Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file duCheck if you run itEPSS 0.66%Oct 13, 2026
- UnknownMalicious code in fontcase (PyPI)Open the advisoryOct 13, 2026
- High7.8Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.8Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Oct 13, 2026
- Medium5.5Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform t…Check if you run itEPSS 0.36%Oct 13, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an aut…Check if you run itEPSS 0.20%Oct 13, 2026
- High7.5Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.Check if you run itEPSS 0.82%Oct 13, 2026
- High7.4Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing VulnerabilityCheck if you run itEPSS 0.58%Oct 13, 2026
- High8.1Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vul…Check if you run itEPSS 0.90%Oct 13, 2026
- High8.7Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln…Check if you run itEPSS 0.86%Oct 13, 2026
- High7.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.75%Oct 13, 2026
- High8.8Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.Open the advisoryOct 13, 2026
- Medium6.8Distribution: Client does not verify returned content against requested digestCheck if you run itEPSS 0.21%Oct 13, 2026
- Medium5.3Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check N…Check if you run itEPSS 0.25%Oct 13, 2026
- High8.6A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunder…Check if you run itEPSS 0.17%Oct 13, 2026
- High8.4Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks.Check if you run itEPSS 0.17%Oct 13, 2026
- Low2.1Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML with…Check if you run itEPSS 0.24%Oct 13, 2026