Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.Check if you run itEPSS 3.03%Mar 16, 2026
- Medium6.9Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/archivos/usuarios/[ID]/[username]/thumb_AAxAA.jpg' (translated…Check if you run itEPSS 0.30%Mar 16, 2026
- High8.7Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/administracion/admin_usuarios.cgi?filtro_estado=T&wAccion=list…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 1.56%Mar 16, 2026
- High8.8GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.95%Mar 16, 2026
- High7.8GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.95%Mar 16, 2026
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'.Check if you run itEPSS 0.16%Mar 16, 2026
- Medium5.3Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'.Check if you run itEPSS 0.38%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'.Check if you run itEPSS 0.25%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.Check if you run itEPSS 0.25%Mar 16, 2026
- High8.6Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email a…Check if you run itEPSS 0.26%Mar 16, 2026
- High8.6OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.Check if you run itEPSS 1.61%Mar 16, 2026
- High7.8GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.86%Mar 16, 2026
- High7.8GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.51%Mar 16, 2026
- High7.8GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.99%Mar 16, 2026
- High7.8GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.91%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-o…Check if you run itEPSS 0.26%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original p…Check if you run itEPSS 0.20%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass a…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium6.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials wh…Check if you run itEPSS 0.38%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed te…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to sp…Check if you run itEPSS 0.12%Mar 16, 2026
- Medium5.7Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which al…Check if you run itEPSS 0.19%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing PSD image files which allows an authenticat…Check if you run itEPSS 0.25%Mar 16, 2026
Sort