Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.99%Mar 16, 2026
- High7.8GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.91%Mar 16, 2026
- High7.1AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium5.0Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityCheck if you run itEPSS 0.27%Mar 16, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flexmls Flexmls® IDX flexmls-idx allows Reflected XSS.This issue affects FlexmCheck if you run itEPSS 0.17%Mar 16, 2026
- Unknownlinux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-Open the advisoryMar 16, 2026
- Medium5.3A vulnerability was identified in itsourcecode College Management System 1.0.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium6.9A vulnerability was determined in Open5GS up to 2.7.6.Check if you run itEPSS 0.62%Mar 16, 2026
- Medium5.3Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.Check if you run itEPSS 0.41%Mar 16, 2026
- High7.7Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: sCheck if you run itEPSS 0.56%Mar 16, 2026
- Medium5.1A vulnerability was found in Lagom WHMCS Template up to 2.3.7.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing DOC files which allows an authenticated attacker to causCheck if you run itEPSS 0.31%Mar 16, 2026
- Critical9.8HCL AION is affected by a vulnerability where offering images are not digitally signed.Check if you run itEPSS 0.14%Mar 16, 2026
- High7.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium5.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.23%Mar 16, 2026
- High7.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.26%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post files in channeCheck if you run itEPSS 0.25%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker to cause a reqCheck if you run itEPSS 0.33%Mar 16, 2026
- High7.5Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly handle very long passwords, which allows an attacker to overload the server CPU and memCheck if you run itEPSS 0.32%Mar 16, 2026
- Medium6.9A flaw has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.29%Mar 16, 2026
- Medium6.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials which allows anCheck if you run itEPSS 0.38%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read messagCheck if you run itEPSS 0.26%Mar 16, 2026
- Medium6.9Raytha CMS does not have any brute force protection mechanism implemented.Check if you run itEPSS 0.43%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to User Enumeration in password reset functionality.Check if you run itEPSS 0.32%Mar 16, 2026
Sort