Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7SimpleEval is a library for adding evaluatable expressions into python projects.Check if you run itEPSS 0.54%Mar 16, 2026
- High8.1cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.19%Mar 16, 2026
- Critical9.6AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.75%Mar 16, 2026
- Critical9.9Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.54%Mar 16, 2026
- High8.2Pigeon is a message board/notepad/social system/blog.Check if you run itEPSS 0.21%Mar 16, 2026
- High7.5Go ShangMi (Commercial Cryptography) Library (GMSM) is a cryptographic library that covers the Chinese commercial cryptographic public algorithms SM2/SM3/SM4/SM9/ZUC.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.36%Mar 16, 2026
- High8.7Yamux is a stream multiplexer over reliable, ordered connections such as TCP/IP.Check if you run itEPSS 0.48%Mar 16, 2026
- High8.6OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.Check if you run itEPSS 1.44%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-o…Check if you run itEPSS 0.23%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original p…Check if you run itEPSS 0.18%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass a…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium6.6Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to restrict plugin installation on CI test instances with default admin credentials wh…Check if you run itEPSS 0.34%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate team membership when searching channels which allows a removed te…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to sanitize client-supplied post metadata which allows an authenticated attacker to sp…Check if you run itEPSS 0.11%Mar 16, 2026
- Medium5.7Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of responses from integration action endpoints, which al…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium5.3The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to unauthorized modification…Check if you run itEPSS 0.20%Mar 16, 2026
- High7.1arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.Check if you run itEPSS 0.28%Mar 16, 2026
- High7.0arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component.Check if you run itEPSS 0.22%Mar 16, 2026
- High8.6arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component.Check if you run itEPSS 0.20%Mar 16, 2026
- High8.7arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component.Check if you run itEPSS 0.41%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing PSD image files which allows an authenticat…Check if you run itEPSS 0.22%Mar 16, 2026
- High7.1AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.45%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker t…Check if you run itEPSS 0.30%Mar 16, 2026
Sort