Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is e…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium4.6HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)Check if you run itEPSS 0.18%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.12%Oct 14, 2026
- Medium6.1A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux).Check if you run itEPSS 0.15%Oct 14, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 14, 2026
- UnknownPublished: 2026-09-28 Description Description Severity Notes A Confused Deputy vulnerability was discovered in the Email Task component in Application Integration vers…Check if you run itEPSS 0.32%Oct 14, 2026
- UnknownPublished: 2026-08-11 Description Description Severity Notes A vulnerability (CVE-2026-6726, also known as TCGVRT0010) has been identified in the Trusted Computing Gro…Check if you run itEPSS 0.19%Oct 14, 2026
- UnknownCVE-2026-53492 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Check if you run itEPSS 0.35%Oct 14, 2026
- UnknownCVE-2026-53489 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Check if you run itEPSS 0.17%Oct 14, 2026
- UnknownCVE-2026-53488 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Check if you run itEPSS 0.18%Oct 14, 2026
- UnknownCVE-2026-50195 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Check if you run itEPSS 0.30%Oct 14, 2026
- UnknownCVE-2026-47262 is listed by Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262.Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownPublished: 2026-08-26 Description Description Severity Notes An Improper Input Validation vulnerability was discovered in the JDBC driver in BigQuery Data Transfer Ser…Check if you run itEPSS 0.45%Oct 14, 2026
- UnknownPublished: 2026-06-25 Description Description Severity Notes A vulnerability was detected in Application Integration's JavaScript task, which was using the Rhino JavaS…Check if you run itEPSS 0.26%Oct 14, 2026
- Critical9.2A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII)…Check if you run itEPSS 0.33%Oct 14, 2026
- CriticalGitea fork workflow approval bypass through maintainer-triggered eventsCheck if you run itEPSS 0.36%Oct 14, 2026
- HighGitea fork workflow job revival through later approvalCheck if you run itEPSS 0.33%Oct 14, 2026
- MediumIncorrect Authorization in Kibana Leading to Sensitive Information DisclosureCheck if you run itEPSS 0.31%Oct 14, 2026
- MediumMissing Authorization in Kibana Leading to Information DisclosureCheck if you run itEPSS 0.21%Oct 14, 2026
- HighAuthorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data InterceptionCheck if you run itEPSS 0.34%Oct 14, 2026
- High7.5The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via…Check if you run itEPSS 0.69%Oct 14, 2026
- High7.2The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insuf…Check if you run itEPSS 0.32%Oct 14, 2026
- High7.2Koha is vulnerable to SQL injection in the Most-circulated items report.Check if you run itEPSS 0.28%Oct 14, 2026
- High8.1The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the ' _type (e.g.Check if you run itEPSS 1.01%Oct 14, 2026