Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.48%Mar 17, 2026
- Critical9.0ConnectWise ScreenConnect Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.37%Mar 17, 2026
- Low2.0A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.29%Mar 16, 2026
- Critical9.1YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter.Check if you run itEPSS 0.45%Mar 16, 2026
- High8.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to handle incorrectly reported array lengths which allows malicious user to cause OOM…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint.Check if you run itEPSS 1.00%Mar 16, 2026
- Low3.8Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to dem…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing pri…Check if you run itEPSS 0.23%Mar 16, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.20%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.29%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.53%Mar 16, 2026
- Medium6.9Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read th…Check if you run itEPSS 0.53%Mar 16, 2026
- Critical9.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2 fail to verify run_create permission for empty playbookId, which allows team members to create unauthorized runs…Check if you run itEPSS 0.17%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.40%Mar 16, 2026
- High8.9A weakness has been identified in Tenda AC8 up to 16.03.50.11.Check if you run itEPSS 0.90%Mar 16, 2026
- Medium6.0When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs.Check if you run itEPSS 0.70%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploit…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attacker…Check if you run itEPSS 0.16%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.14%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.14%Mar 16, 2026
- High8.2Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.24%Mar 16, 2026
- High7.8Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 0.45%Mar 16, 2026
- High7.5SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php componentCheck if you run itEPSS 0.43%Mar 16, 2026
- High8.9A vulnerability was identified in Tenda AC8 16.03.50.11.Check if you run itEPSS 1.28%Mar 16, 2026
Sort