Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.54%Mar 16, 2026
- High7.5AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.43%Mar 16, 2026
- High8.2Pigeon is a message board/notepad/social system/blog.Check if you run itEPSS 0.21%Mar 16, 2026
- High7.5Go ShangMi (Commercial Cryptography) Library (GMSM) is a cryptographic library that covers the Chinese commercial cryptographic public algorithms SM2/SM3/SM4/SM9/ZUC.Check if you run itEPSS 0.22%Mar 16, 2026
- High8.2xml-security is a library that implements XML signatures and encryption.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.36%Mar 16, 2026
- High8.7Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.Check if you run itEPSS 0.48%Mar 16, 2026
- High8.2xmlseclibs is a library written in PHP for working with XML Encryption and Signatures.Check if you run itEPSS 0.16%Mar 16, 2026
- High8.6OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.Check if you run itEPSS 1.44%Mar 16, 2026
- High7.8GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.76%Mar 16, 2026
- High7.8GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.45%Mar 16, 2026
- High7.8GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.90%Mar 16, 2026
- High7.8GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.80%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-o…Check if you run itEPSS 0.23%Mar 16, 2026
- High7.5IceWarp collaboration Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 5.03%Mar 16, 2026
- Medium6.3Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability.Check if you run itEPSS 0.47%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original p…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass a…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium6.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials wh…Check if you run itEPSS 0.34%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed te…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to sp…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium5.7Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which al…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium5.3The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification…Check if you run itEPSS 0.20%Mar 16, 2026
- High7.1arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.Check if you run itEPSS 0.27%Mar 16, 2026
Sort