Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.29%Mar 16, 2026
- Critical9.1YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.Check if you run itEPSS 0.46%Mar 16, 2026
- Medium5.5A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.Check if you run itEPSS 0.19%Mar 16, 2026
- High8.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint.Check if you run itEPSS 1.02%Mar 16, 2026
- Low3.8Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to dem…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing pri…Check if you run itEPSS 0.23%Mar 16, 2026
- Critical9.8A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitra…Check if you run itEPSS 2.18%Mar 16, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.65%Mar 16, 2026
- High7.7Craft CMS is a content management system (CMS).Check if you run itEPSS 9.56%Mar 16, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.55%Mar 16, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.53%Mar 16, 2026
- Medium5.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.31%Mar 16, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.21%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.29%Mar 16, 2026
- Medium6.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.22%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.55%Mar 16, 2026
- Medium6.9Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read th…Check if you run itEPSS 0.55%Mar 16, 2026
- Critical9.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.35%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium5.4Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c).Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.5In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).Check if you run itEPSS 0.50%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.41%Mar 16, 2026
- Critical9.8A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via…Check if you run itEPSS 0.56%Mar 16, 2026
- Critical9.1An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cause a Denial of Service (DoS…Check if you run itEPSS 0.37%Mar 16, 2026
Sort