Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A flaw was found in libsoup, a library used by applications to send network requests.Check if you run itEPSS 0.36%Mar 17, 2026
- High7.7The extension fails to properly reset the generated MFA code after successful authentication.Check if you run itEPSS 0.47%Mar 17, 2026
- Medium5.2The extension fails to properly define allowed classes used when deserializing transport failure metadata.Check if you run itEPSS 0.22%Mar 17, 2026
- Critical9.1YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.Check if you run itEPSS 0.63%Mar 16, 2026
- Low3.8Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to dem…Check if you run itEPSS 0.27%Mar 16, 2026
- High7.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.37%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users…Check if you run itEPSS 0.17%Mar 16, 2026
- High7.8HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.Check if you run itEPSS 0.10%Mar 16, 2026
- Low2.0A vulnerability was found in Lagom WHMCS Template up to 2.3.7.Check if you run itEPSS 0.40%Mar 16, 2026
- High8.8GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability.Check if you run itEPSS 0.82%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original p…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed te…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker t…Check if you run itEPSS 0.38%Mar 16, 2026
- High7.5Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly handle very long passwords, which allows an attacker to overload the serve…Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various paramet…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload FilenameCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.27%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple ParametersCheck if you run itEPSS 0.29%Mar 15, 2026
- High8.7Qool CMS Multiple Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.37%Mar 15, 2026
- High7.2Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.28%Mar 13, 2026
- Critical9.3FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.67%Mar 13, 2026
- Medium5.0JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.13%Mar 13, 2026
- Medium6.5Backstage is an open framework for building developer portals.Check if you run itEPSS 0.43%Mar 12, 2026
- High7.3A flaw was found in Libsoup.Check if you run itEPSS 0.50%Mar 12, 2026
- High7.82FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.Check if you run itEPSS 0.54%Mar 11, 2026