Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via tCheck if you run itEPSS 0.18%Nov 14, 2025
- Medium4.3Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the endpointCheck if you run itEPSS 0.21%Nov 14, 2025
- High8.6Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in NCP-HG100 1.4.48.16 and earlier.Check if you run itEPSS 1.21%Nov 14, 2025
- Medium6.9IQ-Support developed by IQ Service International has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to access specific APIs to obtainCheck if you run itEPSS 0.33%Nov 14, 2025
- Medium5.4An authenticated SQL injection vulnerability exists in Cloudlog 2.7.5 and earlier.Check if you run itEPSS 0.33%Nov 14, 2025
- Medium6.1CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function.Check if you run itEPSS 0.27%Nov 14, 2025
- High8.6Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination with Windows ShellExecuteW fallback extension resolution, leadCheck if you run itEPSS 0.31%Nov 14, 2025
- Medium5.4When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php.Check if you run itEPSS 0.21%Nov 14, 2025
- Medium6.1PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php.Check if you run itEPSS 0.24%Nov 14, 2025
- Medium6.5PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php.Check if you run itEPSS 0.26%Nov 14, 2025
- Medium6.5Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection.Check if you run itEPSS 0.26%Nov 14, 2025
- High7.5Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.41%Nov 13, 2025
- Critical9.1IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.53%Nov 13, 2025
- Critical10.0IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to impropCheck if you run itEPSS 0.67%Nov 13, 2025
- Critical9.0IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker usingCheck if you run itEPSS 0.32%Nov 13, 2025
- Critical9.8IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls.Check if you run itEPSS 0.54%Nov 13, 2025
- Low2.7Jitsi Meet is an open source video conferencing application.Check if you run itEPSS 0.41%Nov 13, 2025
- Medium6.5grist-core is a spreadsheet hosting server.Check if you run itEPSS 0.24%Nov 13, 2025
- Medium6.8grist-core is a spreadsheet hosting server.Check if you run itEPSS 0.24%Nov 13, 2025
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.30%Nov 13, 2025
- Medium4.6Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.21%Nov 13, 2025
- Low3.5OpenObserve is a cloud-native observability platform.Check if you run itEPSS 0.19%Nov 13, 2025
- Medium6.6A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet throughCheck if you run itEPSS 0.59%Nov 13, 2025
- High8.1Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs.Check if you run itEPSS 0.42%Nov 13, 2025
Sort