Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.32%Mar 26, 2026
- High7.2A flaw was found in Keycloak.Check if you run itEPSS 0.49%Mar 26, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.33%Mar 26, 2026
- High8.7thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows reCheck if you run itEPSS 4.43%Mar 26, 2026
- High7.5Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as .Check if you run itEPSS 0.82%Mar 26, 2026
- Medium6.5srvx is a universal server based on web standards.Check if you run itEPSS 0.26%Mar 26, 2026
- High7.2Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.Check if you run itEPSS 0.37%Mar 26, 2026
- High7.2Ory Kratos is an identity, user management and authentication system for cloud services.Check if you run itEPSS 0.26%Mar 26, 2026
- High8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.39%Mar 26, 2026
- Medium6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.25%Mar 26, 2026
- Critical10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.54%Mar 26, 2026
- Medium5.3H3 is a minimal H(TTP) framework.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.5Roadiz is a polymorphic content management system based on a node system that can handle many types of services.Check if you run itEPSS 0.41%Mar 26, 2026
- Medium5.3Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.Check if you run itEPSS 0.43%Mar 26, 2026
- Medium4.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.24%Mar 26, 2026
- High7.8Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy validation isCheck if you run itEPSS 0.43%Mar 26, 2026
- High7.5goxmlsig provides XML Digital Signatures implemented in Go.Check if you run itEPSS 0.33%Mar 26, 2026
- High7.5Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (.).Check if you run itEPSS 0.53%Mar 26, 2026
- Medium4.9Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disru…Check if you run itEPSS 0.36%Mar 26, 2026
- Medium4.3Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which a…Check if you run itEPSS 0.24%Mar 26, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction…Check if you run itEPSS 0.36%Mar 26, 2026
- Medium5.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other loca…Check if you run itEPSS 0.14%Mar 26, 2026
- Medium4.9Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system a…Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.2Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via repl…Check if you run itEPSS 0.31%Mar 26, 2026
- High8.8Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands termi…Check if you run itEPSS 0.29%Mar 26, 2026
Sort