Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.22%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.24%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.60%Mar 16, 2026
- Critical9.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.38%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.4Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c).Check if you run itEPSS 0.31%Mar 16, 2026
- Medium6.5In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).Check if you run itEPSS 0.53%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.43%Mar 16, 2026
- Critical9.8A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via…Check if you run itEPSS 0.59%Mar 16, 2026
- Critical9.1An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and cause a Denial of Service (DoS…Check if you run itEPSS 0.40%Mar 16, 2026
- Medium5.3An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.9Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadowCheck if you run itEPSS 0.58%Mar 16, 2026
- Medium5.8A missing S3 ownership verification in the Bedrock AgentCore Starter Toolkit before version v0.1.13 may allow a remote actor to inject code during the build process, l…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.9A weakness has been identified in Tenda AC8 up to 16.03.50.11.Check if you run itEPSS 1.01%Mar 16, 2026
- Low2.0A security flaw has been discovered in Tenda AC8 16.03.50.11.Check if you run itEPSS 8.14%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploit…Check if you run itEPSS 0.13%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attacker…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.16%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.16%Mar 16, 2026
- High8.3Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.16%Mar 16, 2026
- High7.8Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 0.50%Mar 16, 2026
- Critical9.1Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.Check if you run itEPSS 0.34%Mar 16, 2026
- High7.5SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php componentCheck if you run itEPSS 0.48%Mar 16, 2026
- High7.5Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game filesCheck if you run itEPSS 0.76%Mar 16, 2026
Sort