Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.54%Mar 26, 2026
- High8.7Problem in the Small HTTP Server v3.06.36 service.Check if you run itEPSS 0.64%Mar 26, 2026
- Critical9.3plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-supplied MIME type during fCheck if you run itEPSS 0.91%Mar 26, 2026
- High8.8The VSL privileged helper does utilize NSXPC for IPC.Check if you run itEPSS 0.48%Mar 26, 2026
- Medium5.4Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-level access when processing membership sync from a remote clustCheck if you run itEPSS 0.15%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_validation() icmp_tag_validation() unconditionally dereferences tCheck if you run itEPSS 0.13%Mar 26, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfnetlink_osf: validate individual option lengths in fingerprints nfnl_osf_add_callback() validates opt_num bounCheck if you run itEPSS 0.13%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_local() mesh_matches_local() unconditionally dereferences ie->mesCheck if you run itEPSS 0.12%Mar 26, 2026
- Medium6.9Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/webchat/messageCheck if you run itEPSS 0.28%Mar 26, 2026
- Medium6.9Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/ /'.Check if you run itEPSS 0.25%Mar 26, 2026
- High8.7A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.49%Mar 26, 2026
- High8.7A weakness has been identified in Wavlink WL-NU516U1 260227.Check if you run itEPSS 0.88%Mar 26, 2026
- Medium6.9A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4.Check if you run itEPSS 0.44%Mar 26, 2026
- Medium6.9A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.36%Mar 26, 2026
- Medium5.3A vulnerability was identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.28%Mar 26, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.36%Mar 26, 2026
- Medium5.3A vulnerability was determined in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.28%Mar 26, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.Check if you run itEPSS 0.14%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.Check if you run itEPSS 0.17%Mar 26, 2026
- Medium5.3A vulnerability was found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.35%Mar 26, 2026
- High8.8Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet.Check if you run itEPSS 3.51%Mar 26, 2026
- High7.5On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID.Check if you run itEPSS 0.38%Mar 26, 2026
- High7.5When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in.Check if you run itEPSS 1.17%Mar 26, 2026
- Medium5.3The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing dataPatch nowKEVEPSS 0.70%Mar 26, 2026
- Medium4.8The WP Lightbox 2 WordPress plugin before 3.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.20%Mar 26, 2026
Sort