Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.31%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.21%Mar 25, 2026
- Medium4.3IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to cross-site request forgery which could allow an att…Check if you run itEPSS 0.14%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.23%Mar 25, 2026
- Low3.1IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to proc…Check if you run itEPSS 0.23%Mar 25, 2026
- Medium5.4NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.25%Mar 25, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.47%Mar 25, 2026
- Medium4.6Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to properly validate CSRF tokens in the /api/v4/access_control_polic…Check if you run itEPSS 0.22%Mar 25, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote att…Check if you run itEPSS 0.54%Mar 25, 2026
- Medium5.5Requests is a HTTP library.Check if you run itEPSS 0.19%Mar 25, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This…Check if you run itEPSS 0.17%Mar 25, 2026
- Medium5.0Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.Check if you run itEPSS 0.28%Mar 25, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: f…Check if you run itEPSS 0.15%Mar 25, 2026
- High7.7A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affecte…Check if you run itEPSS 0.29%Mar 25, 2026
- Medium5.4A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and…Check if you run itEPSS 0.30%Mar 25, 2026
- High8.6A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VL…Check if you run itEPSS 0.36%Mar 25, 2026
- Medium6.5A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a d…Check if you run itEPSS 0.10%Mar 25, 2026
- High8.8OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'se…Check if you run itEPSS 0.34%Mar 25, 2026
- Critical9.8In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.Check if you run itEPSS 0.55%Mar 25, 2026
- Medium5.4A use-after-return vulnerability exists in the server when handling DNS queries signed with SIG(0).Check if you run itEPSS 0.34%Mar 25, 2026
- Medium6.5Under certain conditions, may crash when processing a correctly signed query containing a TKEY record.Check if you run itEPSS 0.62%Mar 25, 2026
- Medium5.1Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modific…Check if you run itEPSS 0.10%Mar 25, 2026
- High8.8A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network ran…Check if you run itEPSS 0.43%Mar 25, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts to accept…Check if you run itEPSS 0.26%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpf_plt contains…Check if you run itEPSS 0.13%Mar 25, 2026