Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptiCheck if you run itEPSS 0.24%Aug 11, 2025
- Medium5.9Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an iCheck if you run itEPSS 0.30%Aug 11, 2025
- Medium5.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space theCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium4.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to thCheck if you run itEPSS 0.20%Aug 11, 2025
- Low3.7Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access toCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium5.9Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an iCheck if you run itEPSS 0.29%Aug 11, 2025
- High7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoCheck if you run itEPSS 0.34%Aug 11, 2025
- Low3.7Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription detCheck if you run itEPSS 0.25%Aug 11, 2025
- Medium6.4Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the uCheck if you run itEPSS 0.18%Aug 11, 2025
- High7.2Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription withoutCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium4.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access toCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium5.4Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.Check if you run itEPSS 0.19%Aug 11, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.46%Aug 11, 2025
- High8.0Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 0.77%Aug 11, 2025
- Medium6.7A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with anCheck if you run itEPSS 0.57%Aug 11, 2025
- Medium5.1YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint.Check if you run itEPSS 0.23%Aug 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns What we want is to verify thereCheck if you run itEPSS 0.16%Aug 11, 2025
- Critical9.4Openfiler v2.x contains a command injection vulnerability in the system.html page.Check if you run itEPSS 3.43%Aug 11, 2025
- Critical9.4ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi.Check if you run itEPSS 3.42%Aug 11, 2025
- Critical9.3Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php.Check if you run itEPSS 1.65%Aug 11, 2025
- Critical9.3PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php.Check if you run itEPSS 1.71%Aug 11, 2025
- Medium5.3A vulnerability was identified in code-projects eBlog Site 1.0.Check if you run itEPSS 0.35%Aug 11, 2025
- Medium4.1The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs.Check if you run itEPSS 0.16%Aug 11, 2025
- Medium5.3A vulnerability was identified in WuKongOpenSource WukongCRM 11.0.Check if you run itEPSS 0.38%Aug 11, 2025
- Medium4.8A vulnerability was determined in LibTIFF up to 4.5.1.Check if you run itEPSS 0.19%Aug 11, 2025
Sort