Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to User Enumeration in password reset functionality.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.3Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.Check if you run itEPSS 0.28%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.14%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.Check if you run itEPSS 0.25%Mar 16, 2026
- High8.6"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.Check if you run itEPSS 0.54%Mar 16, 2026
- High7.8A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opeCheck if you run itEPSS 0.20%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing PSD image files which allows an authenticated attacker tCheck if you run itEPSS 0.25%Mar 16, 2026
- Medium6.9A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.32%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed team member toCheck if you run itEPSS 0.19%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to spoof permalinkCheck if you run itEPSS 0.12%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker with editor pCheck if you run itEPSS 0.18%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access controlCheck if you run itEPSS 0.19%Mar 16, 2026
- High7.6Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settingCheck if you run itEPSS 0.20%Mar 16, 2026
- Medium5.7Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which allows an autheCheck if you run itEPSS 0.19%Mar 16, 2026
- Medium6.9A weakness has been identified in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.29%Mar 16, 2026
- Medium6.0Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admCheck if you run itEPSS 0.17%Mar 16, 2026
- Medium6.0Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admiCheck if you run itEPSS 0.12%Mar 16, 2026
- Medium6.0Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local adminCheck if you run itEPSS 0.13%Mar 16, 2026
- Medium5.3A security flaw has been discovered in SSCMS 7.4.0.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'.Check if you run itEPSS 0.16%Mar 16, 2026
Sort