Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory e…Check if you run itEPSS 0.31%Apr 9, 2026
- Critical9.1When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted.Check if you run itEPSS 0.67%Apr 9, 2026
- Medium6.9AlanWeb SCADA saves sensitive information into a log file.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer ro…Check if you run itEPSS 0.69%Apr 9, 2026
- High8.7AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters.Check if you run itEPSS 0.29%Apr 9, 2026
- Critical9.1In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from…Check if you run itEPSS 0.42%Apr 9, 2026
- Critical9.1Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and…Check if you run itEPSS 0.36%Apr 9, 2026
- High8.9A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 13.51%Apr 9, 2026
- High8.9A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 15.10%Apr 9, 2026
- High7.3A vulnerability was found in D-Link DIR-882 1.01B02.Check if you run itEPSS 5.08%Apr 9, 2026
- Medium5.5A weakness has been identified in Tenda i3 1.0.0.6(2204).Check if you run itEPSS 0.63%Apr 9, 2026
- Low2.0A security flaw has been discovered in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.20%Apr 9, 2026
- Low2.0A vulnerability was identified in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.20%Apr 9, 2026
- Medium6.4The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60.Check if you run itEPSS 0.23%Apr 9, 2026
- Medium6.4The Ultimate FAQ Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via FAQ content in all versions up to, and including, 2.4.7.Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.5A vulnerability was found in PHPGurukul News Portal Project 4.1.Check if you run itEPSS 0.26%Apr 9, 2026
- Low1.9A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1.Check if you run itEPSS 0.71%Apr 9, 2026
- Medium4.3The MStore API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.18.3.Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.5A weakness has been identified in atototo api-lab-mcp up to 0.2.1.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium5.3A security flaw has been discovered in Agions taskflow-ai up to 2.1.8.Check if you run itEPSS 1.22%Apr 9, 2026
- High7.4A vulnerability was identified in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.63%Apr 9, 2026
- High8.8The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4.Check if you run itEPSS 0.58%Apr 9, 2026
- Low2.1A weakness has been identified in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.19%Apr 9, 2026
- High7.4A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03.Check if you run itEPSS 0.68%Apr 9, 2026
- Medium5.5A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.25%Apr 9, 2026
Sort