Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space theCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium4.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to thCheck if you run itEPSS 0.20%Aug 11, 2025
- Low3.7Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access toCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium5.9Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an iCheck if you run itEPSS 0.29%Aug 11, 2025
- High7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoCheck if you run itEPSS 0.34%Aug 11, 2025
- Low3.7Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription detCheck if you run itEPSS 0.25%Aug 11, 2025
- Medium6.4Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the uCheck if you run itEPSS 0.18%Aug 11, 2025
- High7.2Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription withoutCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium4.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access toCheck if you run itEPSS 0.21%Aug 11, 2025
- Medium5.4Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.Check if you run itEPSS 0.19%Aug 11, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 23.46%Aug 11, 2025
- Medium5.1YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint.Check if you run itEPSS 0.23%Aug 11, 2025
- Critical9.4Openfiler v2.x contains a command injection vulnerability in the system.html page.Check if you run itEPSS 3.43%Aug 11, 2025
- Critical9.4ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi.Check if you run itEPSS 3.42%Aug 11, 2025
- Critical9.3Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php.Check if you run itEPSS 1.65%Aug 11, 2025
- Critical9.3PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php.Check if you run itEPSS 1.71%Aug 11, 2025
- Medium4.1The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs.Check if you run itEPSS 0.16%Aug 11, 2025
- Medium4.8MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle.Check if you run itEPSS 0.34%Aug 11, 2025
- Medium5.3A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0.Check if you run itEPSS 0.32%Aug 11, 2025
- Critical9.3Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connectiCheck if you run itEPSS 0.71%Aug 11, 2025
- Medium6.9A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8.Check if you run itEPSS 0.55%Aug 11, 2025
- Critical9.8ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data_manager.py.Check if you run itEPSS 0.84%Aug 11, 2025
- Medium6.9A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e.Check if you run itEPSS 0.64%Aug 10, 2025
- Medium5.3A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic.Check if you run itEPSS 0.36%Aug 10, 2025
- Medium5.1A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic.Check if you run itEPSS 0.32%Aug 10, 2025
Sort