Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.34%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityCheck if you run itEPSS 0.78%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 0.75%Oct 13, 2026
- Medium5.3Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure VulnerabilityCheck if you run itEPSS 0.28%Oct 13, 2026
- High7.8Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.34%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure VulnerabilityCheck if you run itEPSS 0.69%Oct 13, 2026
- UnknownCVE-2026-70229 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.Check if you run itEPSS 0.71%Oct 13, 2026
- UnknownCVE-2026-108399 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.Check if you run itEPSS 0.34%Oct 13, 2026
- UnknownCVE-2026-105733 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.Check if you run itEPSS 0.33%Oct 13, 2026
- UnknownCVE-2026-102214 is listed by Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities.Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.8Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_valuePatch nowKEVEPSS 0.45%Oct 13, 2026
- Critical9.8Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' ParameterCheck if you run itEPSS 0.38%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their autho…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.1Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invok…Check if you run itEPSS 0.21%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulati…Check if you run itEPSS 0.30%Oct 13, 2026
- High8.7Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download…Check if you run itEPSS 0.36%Oct 13, 2026
- High8.7Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory…Check if you run itEPSS 0.71%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known sess…Check if you run itEPSS 0.38%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by co…Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authent…Check if you run itEPSS 0.41%Oct 13, 2026
- High8.7Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-c…Check if you run itEPSS 0.43%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right r…Check if you run itEPSS 0.29%Oct 13, 2026
- High8.6Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCateg…Check if you run itEPSS 0.30%Oct 13, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated…Check if you run itEPSS 0.36%Oct 13, 2026
- Medium5.1Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploadi…Check if you run itEPSS 0.18%Oct 13, 2026