Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-87865 is listed by USN-8927-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-86412 is listed by USN-8927-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-86410 is listed by USN-8927-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-107929 is listed by USN-8927-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-107928 is listed by USN-8927-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Check if you run itEPSS 0.15%Oct 14, 2026
- Low3.3A flaw was found in BusyBox dpkg.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium4.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium6.4A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service.Check if you run itEPSS 0.10%Oct 14, 2026
- Medium5.4Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts.Check if you run itEPSS 0.13%Oct 14, 2026
- High8.7Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.7A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources pr…Check if you run itEPSS 0.45%Oct 14, 2026
- UnknownCVE-2026-107913Open the advisoryOct 14, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite al…Check if you run itEPSS 0.28%Oct 14, 2026
- High8.8The insights-runtime-extractor runs as a privileged DaemonSet ( ) that scans container processes for runtime fingerprinting.Check if you run itEPSS 0.17%Oct 14, 2026
- High7.5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allow…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.5The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is e…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium5.3The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing una…Check if you run itEPSS 0.26%Oct 14, 2026
- Medium6.5A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers).Check if you run itEPSS 0.36%Oct 14, 2026
- High7.8A flaw was found in BusyBox's dpkg-deb archive extraction.Check if you run itEPSS 0.20%Oct 14, 2026
- High7.2A flaw was found in BusyBox httpd's reverse proxy feature.Check if you run itEPSS 0.32%Oct 14, 2026
- High8.4A flaw was found in gst-plugins-base.Check if you run itEPSS 0.21%Oct 14, 2026
- Medium4.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)Check if you run itEPSS 0.18%Oct 14, 2026