Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Chamilo is a learning management system.Check if you run itEPSS 0.41%Mar 2, 2026
- High8.8Chamilo is a learning management system.Check if you run itEPSS 0.40%Mar 2, 2026
- High7.6Textream is a free macOS teleprompter app.Check if you run itEPSS 0.17%Mar 2, 2026
- High8.3Chamilo is a learning management system.Check if you run itEPSS 0.43%Mar 2, 2026
- High8.8Chamilo is a learning management system.Check if you run itEPSS 0.67%Mar 2, 2026
- High7.0Chamilo is a learning management system.Check if you run itEPSS 0.62%Mar 2, 2026
- High8.8Chamilo is a learning management system.Check if you run itEPSS 0.67%Mar 2, 2026
- High7.2Chamilo is a learning management system.Check if you run itEPSS 0.83%Mar 2, 2026
- High7.0Chamilo is a learning management system.Check if you run itEPSS 0.82%Mar 2, 2026
- Critical9.8Chamilo is a learning management system.Check if you run itEPSS 1.00%Mar 2, 2026
- Low3.6An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME.Check if you run itEPSS 0.10%Mar 2, 2026
- Medium4.8Chamilo is a learning management system.Check if you run itEPSS 0.35%Mar 2, 2026
- Medium5.3Chamilo is a learning management system.Check if you run itEPSS 0.38%Mar 2, 2026
- High8.7Chamilo is a learning management system.Check if you run itEPSS 1.05%Mar 2, 2026
- Critical10.0A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).Check if you run itEPSS 1.09%Mar 2, 2026
- Medium4.6Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to expose preloCheck if you run itEPSS 0.16%Mar 2, 2026
- Critical9.3On SimStudio version below to 0.5.74, the endpoint contains a code path that bypasses all authorization checks when provided with and parameters.Check if you run itEPSS 0.34%Mar 2, 2026
- Critical9.8On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller without authentication or host restrictions.Check if you run itEPSS 0.40%Mar 2, 2026
- Critical9.3DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can result in Remote Code ExecutCheck if you run itEPSS 0.62%Mar 2, 2026
- Critical9.3A Blind SQL injection vulnerability has been identified in DobryCMS.Check if you run itEPSS 0.51%Mar 2, 2026
- High8.7PKCS7_verify Signature Validation Bypass in AWS-LCCheck if you run itEPSS 0.78%Mar 2, 2026
- High8.2Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis.Check if you run itEPSS 1.07%Mar 2, 2026
- High8.7PKCS7_verify Certificate Chain Validation Bypass in AWS-LCCheck if you run itEPSS 0.74%Mar 2, 2026
- Medium5.3The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑Check if you run itEPSS 0.21%Mar 2, 2026
- Medium5.3The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detectCheck if you run itEPSS 0.20%Mar 2, 2026
Sort