Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.45%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly validate User-Agent header tokens which allows an authenticated attacker t…Check if you run itEPSS 0.30%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to bound memory allocation when processing DOC files which allows an authenticated att…Check if you run itEPSS 0.28%Mar 16, 2026
- High8.7GROWI OpenAI thread/message API endpoints do not perform authorization.Check if you run itEPSS 0.31%Mar 16, 2026
- High7.5Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly handle very long passwords, which allows an attacker to overload the serve…Check if you run itEPSS 0.28%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.15%Mar 16, 2026
- High8.8This issue affects Apache Spark: before 3.5.7 and 4.0.1.Check if you run itEPSS 5.42%Mar 16, 2026
- Critical9.8HCL AION is affected by a vulnerability where offering images are not digitally signed.Check if you run itEPSS 0.12%Mar 16, 2026
- High7.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges.Check if you run itEPSS 0.13%Mar 16, 2026
- High7.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.23%Mar 16, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.Check if you run itEPSS 1.48%Mar 16, 2026
- Medium4.3IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one fo…Check if you run itEPSS 0.35%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious content by…Check if you run itEPSS 1.06%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and…Check if you run itEPSS 0.53%Mar 16, 2026
- High8.7Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot witho…Check if you run itEPSS 0.72%Mar 16, 2026
- Medium5.3Telesquare SKT LTE Router SDT-CS3B1 version 1.2.0 contains a cross-site request forgery vulnerability that allows authenticated attackers to execute arbitrary system c…Check if you run itEPSS 0.29%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.Check if you run itEPSS 0.40%Mar 16, 2026
- Medium5.1Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by…Check if you run itEPSS 0.24%Mar 16, 2026
- High8.5Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by pla…Check if you run itEPSS 0.14%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated a…Check if you run itEPSS 0.67%Mar 16, 2026
- Medium5.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various paramet…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium6.9Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages.Check if you run itEPSS 0.16%Mar 16, 2026
- High8.7Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipula…Check if you run itEPSS 0.21%Mar 16, 2026
- High8.5Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files d…Check if you run itEPSS 0.21%Mar 16, 2026
Sort