Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.41%Dec 17, 2025
- High8.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Dec 17, 2025
- Critical10.0ChurchCRM is an open-source church management system.Check if you run itEPSS 4.51%Dec 17, 2025
- Medium4.3The Ultimate Member plugin for WordPress is vulnerable to Profile Privacy Setting Bypass in all versions up to, and including, 2.11.0.Check if you run itEPSS 0.32%Dec 17, 2025
- Medium6.4The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to multiple Stored Cross-Site Scripting vulnerabilities via DOM manipulation in all versions uCheck if you run itEPSS 0.23%Dec 17, 2025
- Low3.9Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC perCheck if you run itEPSS 0.11%Dec 17, 2025
- Low3.7Mattermost versions 10.11.x <= 10.11.5, 11.0.x <= 11.0.4, 10.12.x <= 10.12.2 fail to invalidate remote cluster invite tokens when using the legacy (version 1) protocol or when theCheck if you run itEPSS 0.20%Dec 17, 2025
- Low3.3Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the useCheck if you run itEPSS 0.12%Dec 17, 2025
- Medium6.5Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls pluCheck if you run itEPSS 0.29%Dec 17, 2025
- Medium6.5Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.Check if you run itEPSS 0.31%Dec 17, 2025
- High8.7Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.Check if you run itEPSS 0.29%Dec 17, 2025
- High8.7A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation.Check if you run itEPSS 0.43%Dec 17, 2025
- Critical10.0An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.Check if you run itEPSS 9.09%Dec 17, 2025
- Low0.6CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator.Check if you run itEPSS 0.18%Dec 17, 2025
- High7.1Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.Check if you run itEPSS 0.10%Dec 17, 2025
- High7.2A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions areCheck if you run itEPSS 0.46%Dec 17, 2025
- High8.4A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information.Check if you run itEPSS 0.14%Dec 17, 2025
- Low3.1Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link openeCheck if you run itEPSS 0.15%Dec 17, 2025
- Low3.0Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub plugin versions <=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack thCheck if you run itEPSS 0.18%Dec 17, 2025
- Medium4.3Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 and Mattermost Calls versions <=1.10.0 fail to implement CSRF protection on the Calls widget page whichCheck if you run itEPSS 0.12%Dec 17, 2025
- Critical9.8Edge3 Worker RPC RCE on Airflow 2.Check if you run itEPSS 1.17%Dec 17, 2025
- Medium6.8A "Privilege boundary violation" vulnerability is identified affecting multiple Radiometer Products.Check if you run itEPSS 0.17%Dec 17, 2025
- High7.1Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc.Check if you run itEPSS 0.22%Dec 17, 2025
- Medium6.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd.Check if you run itEPSS 0.21%Dec 17, 2025
- Medium4.9The Zephyr Project Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.203 via the parameter.Check if you run itEPSS 0.69%Dec 17, 2025
Sort