Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Missing Authorization vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.3Missing Authorization vulnerability in Webnus Inc.Check if you run itEPSS 0.71%Mar 16, 2026
- High8.8A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product.Check if you run itEPSS 0.19%Mar 16, 2026
- High7.8A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe).Check if you run itEPSS 0.17%Mar 16, 2026
- Critical9.8Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application…Check if you run itEPSS 0.29%Mar 16, 2026
- Medium6.1Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.Check if you run itEPSS 0.19%Mar 16, 2026
- Low1.1A weakness has been identified in La Nacion App 10.2.25 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- Low1.1A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android.Check if you run itEPSS 0.10%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows…Check if you run itEPSS 0.17%Mar 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue…Check if you run itEPSS 0.15%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users…Check if you run itEPSS 0.17%Mar 16, 2026
- Low3.5Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker t…Check if you run itEPSS 0.15%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an auth…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.Check if you run itEPSS 0.14%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.Check if you run itEPSS 0.09%Mar 16, 2026
- High8.2HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.Check if you run itEPSS 0.15%Mar 16, 2026
- High7.8HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.Check if you run itEPSS 0.10%Mar 16, 2026
- Medium6.5HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour.Check if you run itEPSS 0.11%Mar 16, 2026
- High7.5HCL AION is affected by a vulnerability related to the handling of upload size limits.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.Check if you run itEPSS 0.16%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post fi…Check if you run itEPSS 0.23%Mar 16, 2026
- High8.4A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.Check if you run itEPSS 0.20%Mar 16, 2026
- Low2.1A vulnerability was identified in itsourcecode College Management System 1.0.Check if you run itEPSS 0.20%Mar 16, 2026
- Medium5.5A vulnerability was determined in Open5GS up to 2.7.6.Check if you run itEPSS 0.57%Mar 16, 2026
Sort