Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.Check if you run itEPSS 0.28%Jul 18, 2025
- High8.3MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component.Check if you run itEPSS 0.34%Jul 18, 2025
- High7.5mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documentation across multiple programming languages and language servCheck this weekEPSS 11.29%Jul 18, 2025
- Medium5.1A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0.Check if you run itEPSS 0.29%Jul 18, 2025
- Medium4.4melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.15%Jul 18, 2025
- High7.0apko allows users to build and publish OCI container images built from apk packages.Check if you run itEPSS 0.14%Jul 18, 2025
- Medium6.6RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with can lead to buffer overflow in versions up to and including 20Check if you run itEPSS 0.86%Jul 18, 2025
- High8.7A vulnerability was found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 1.16%Jul 18, 2025
- Medium6.3A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic.Check if you run itEPSS 0.33%Jul 18, 2025
- Medium5.4OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.24%Jul 18, 2025
- Medium5.3A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical.Check if you run itEPSS 4.95%Jul 18, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1.Check if you run itEPSS 0.50%Jul 18, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10.Check if you run itEPSS 0.28%Jul 18, 2025
- Medium5.3A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0.Check if you run itEPSS 0.48%Jul 18, 2025
- Low2.2Mattermost versions 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to sendCheck if you run itEPSS 0.22%Jul 18, 2025
- Medium5.3A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered.Check if you run itEPSS 0.40%Jul 18, 2025
- Medium5.1A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered.Check if you run itEPSS 0.42%Jul 18, 2025
- Medium6.9A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered.Check if you run itEPSS 0.45%Jul 18, 2025
- Medium5.1A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered.Check if you run itEPSS 0.44%Jul 18, 2025
- High8.6A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.Check if you run itEPSS 0.31%Jul 18, 2025
- High8.6A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.Check if you run itEPSS 0.35%Jul 18, 2025
- Medium5.1Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on tCheck if you run itEPSS 0.12%Jul 18, 2025
- Medium6.8Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which alCheck if you run itEPSS 0.45%Jul 18, 2025
- Medium6.5Mattermost versions 10.5.x <= 10.5.6, 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 9.11.x <= 9.11.16 fail to verify authorization when retrieving cached posts by PendingPostID which allowsCheck if you run itEPSS 0.37%Jul 18, 2025
- Medium4.0An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attaCheck if you run itEPSS 0.39%Jul 18, 2025
Sort