Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.Open the advisoryOct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.94%Oct 13, 2026
- Critical9.1The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_…Check if you run itEPSS 0.53%Oct 13, 2026
- Medium5.1Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.9Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.1The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1.Check if you run itEPSS 0.54%Oct 13, 2026
- Medium5.3The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1.Check if you run itEPSS 0.31%Oct 13, 2026
- High7.5The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.5The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execu…Check if you run itEPSS 0.54%Oct 13, 2026
- High7.5The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly veri…Check if you run itEPSS 0.53%Oct 13, 2026
- UnknownCitrix security advisory (AV26-1034)Open the advisoryOct 13, 2026
- High7.5Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash PinningCheck if you run itEPSS 0.17%Oct 13, 2026
- High7.0Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.26%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.69%Oct 13, 2026
- Medium6.5Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.81%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- Critical9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityCheck if you run itEPSS 0.79%Oct 13, 2026
- High8.7Qwik is a performance-focused JavaScript framework.Check if you run itEPSS 0.52%Oct 13, 2026
- High7.8Windows Sysmain Service Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.24%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.74%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 0.84%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution VulnerabilityCheck if you run itEPSS 1.27%Oct 13, 2026
- UnknownMalicious code in sysdiagd (PyPI)Open the advisoryOct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.Check if you run itEPSS 0.29%Oct 13, 2026