Vulnerability intelligence / live index
A working index of published vulnerability records, ordered by latest update. Open a record to inspect its score, vector, and impact metrics.
CVE Program / CVE List®
Updated continuously
Nov 11, 2026 UTC
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20.
Inspect record →Nov 11, 2026 UTC
Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs by using a hardcoded fallback signing secret when JWT_SECRET is unset. Attackers can sign tokens with arbitrary role, userGroups an…
Inspect record →Nov 11, 2026 UTC
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Inspect record →Nov 11, 2026 UTC
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Inspect record →Nov 11, 2026 UTC
Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.
Inspect record →Nov 11, 2026 UTC
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.
Inspect record →Nov 11, 2026 UTC
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Inspect record →Nov 11, 2026 UTC
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Inspect record →Nov 11, 2026 UTC
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Inspect record →
