Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was determined in CityData CityChat up to 0.12.6 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- Low2.0A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- High7.5LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.Check if you run itEPSS 0.32%Mar 16, 2026
- Critical9.8Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fieldsCheck if you run itEPSS 0.32%Mar 16, 2026
- Medium5.3Missing Authorization vulnerability in Webnus Inc.Check if you run itEPSS 0.76%Mar 16, 2026
- Low2.0A weakness has been identified in La Nacion App 10.2.25 on Android.Check if you run itEPSS 0.12%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without readCheck if you run itEPSS 0.19%Mar 16, 2026
- Low3.5Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authentication method when processing account auth type switch which allows an authenticated attacker to change accoCheck if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows an attacker tCheck if you run itEPSS 0.19%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated teaCheck if you run itEPSS 0.21%Mar 16, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium6.5HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour.Check if you run itEPSS 0.13%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.17%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.Check if you run itEPSS 0.10%Mar 16, 2026
- Medium5.3HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.Check if you run itEPSS 0.15%Mar 16, 2026
- Low2.0A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android.Check if you run itEPSS 0.11%Mar 16, 2026
- High8.2HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.Check if you run itEPSS 0.16%Mar 16, 2026
- High7.8HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.Check if you run itEPSS 0.11%Mar 16, 2026
- High7.5HCL AION is affected by a vulnerability related to the handling of upload size limits.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.5A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command.Check if you run itEPSS 3.03%Mar 16, 2026
- High8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 1.56%Mar 16, 2026
- High8.8GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.95%Mar 16, 2026
- High7.8GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.95%Mar 16, 2026
- High7.8GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.86%Mar 16, 2026
- High7.8GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.51%Mar 16, 2026
Sort