Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of aCheck if you run itEPSS 0.27%Apr 16, 2025
- Low2.2Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to enforce MFA checks in PUT /api/v4/users/user-id/mfa when the requesting user differs from the target user ID, which aCheck if you run itEPSS 0.24%Apr 16, 2025
- Low3.1Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to prevent Wrangler posts from triggering AI responses.Check if you run itEPSS 0.23%Apr 16, 2025
- Medium5.3The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip_spam_check' function due to insufficienCheck if you run itEPSS 0.25%Apr 16, 2025
- Medium6.7Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability.Check if you run itEPSS 0.13%Apr 16, 2025
- Critical9.8Apple Multiple Products Arbitrary Read and Write VulnerabilityPatch nowKEVEPSS 13.86%Apr 16, 2025
- Critical9.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 20.90%Apr 16, 2025
- Critical9.8SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.Check if you run itEPSS 0.62%Apr 16, 2025
- Critical9.8Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by uploading a ZIP file.Check if you run itEPSS 0.65%Apr 16, 2025
- Critical9.8Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uploading a ZIP file.Check if you run itEPSS 0.63%Apr 16, 2025
- Medium4.8Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSettings.php?f=update_settings, and the poiCheck if you run itEPSS 0.27%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at id_generator/admin/?page=generate&template=4.Check if you run itEPSS 0.51%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=generate/index&id=1.Check if you run itEPSS 0.51%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystemSettings.php?f=update_settings.Check if you run itEPSS 0.78%Apr 16, 2025
- Medium5.1Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Users.php?f=save.Check if you run itEPSS 0.26%Apr 16, 2025
- Medium5.4Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php?f=save, and the point of vulnerabilityCheck if you run itEPSS 0.28%Apr 16, 2025
- Medium5.9Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=templates/manage_template&id=Check if you run itEPSS 0.25%Apr 16, 2025
- Critical9.6NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system.Check if you run itEPSS 0.60%Apr 15, 2025
- Medium5.4SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Check if you run itEPSS 0.30%Apr 15, 2025
- Medium5.3Ash Authentication provides authentication for the Ash framework.Check if you run itEPSS 0.32%Apr 15, 2025
- High7.5Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited TCheck if you run itEPSS 0.46%Apr 15, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through <= 2Check if you run itEPSS 0.46%Apr 15, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub: from n/a through <=Check if you run itEPSS 0.47%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainá taina allows Stored XSS.This issue affects Tainá: from n/a throCheck if you run itEPSS 0.27%Apr 15, 2025
- High7.5Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data.Check if you run itEPSS 0.48%Apr 15, 2025
Sort