Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory…Check if you run itEPSS 0.34%May 22, 2026
- High7.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to enforce request body size limits on plugin HTTP endpoints which a…Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate user-supplied input in API request handlers which allows…Check if you run itEPSS 0.25%May 22, 2026
- Medium5.3Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to archive the channel before removing persistent notifications whic…Check if you run itEPSS 0.17%May 22, 2026
- Medium4.3Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to sanitize team member data when returned via API to users without…Check if you run itEPSS 0.18%May 22, 2026
- High7.1Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate file ownership and access control, which allows an authe…Check if you run itEPSS 0.15%May 22, 2026
- Low2.3STER uses unencrypted TCP traffic to transmit data over the network.Check if you run itEPSS 0.21%May 22, 2026
- Medium5.7Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded.Check if you run itEPSS 0.10%May 22, 2026
- High8.7A SQL injection vulnerability has been identified in STER.Check if you run itEPSS 0.22%May 22, 2026
- High7.5The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65.Check if you run itEPSS 0.46%May 22, 2026
- Medium4.3The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, an…Check if you run itEPSS 0.22%May 22, 2026
- Medium5.3The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1.Check if you run itEPSS 0.28%May 22, 2026
- High7.5The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2.Check if you run itEPSS 1.57%May 22, 2026
- Medium5.4A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2.Check if you run itEPSS 0.14%May 22, 2026
- Medium5.4The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side…Check if you run itEPSS 0.69%May 22, 2026
- Medium4.3The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi…Check if you run itEPSS 0.24%May 22, 2026
- Medium4.3The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3.Check if you run itEPSS 0.17%May 22, 2026
- Medium6.5A bitwise shift vulnerability in Zephyr's PTP subsystem allows a remote attacker to cause undefined behavior and potential system crashes.Check if you run itEPSS 0.30%May 22, 2026
- Medium6.4The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Draft Post Title in all versions up to, and including, 2.6.3 due to insufficient i…Check if you run itEPSS 0.22%May 22, 2026
- High8.8The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via…Check if you run itEPSS 0.71%May 22, 2026
- Medium6.4The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode and attributes in all versions up to, and including, 4.0.1.Check if you run itEPSS 0.25%May 22, 2026
- Medium4.3The Location Weather plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the and functions in all versions up t…Check if you run itEPSS 0.25%May 22, 2026
- Medium6.1The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.…Check if you run itEPSS 0.26%May 22, 2026
- Medium4.3The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.16%May 22, 2026
- High7.5There is an an information disclosure vulnerability in ZTE MU5250.Check if you run itEPSS 0.22%May 22, 2026
Sort