Mitre vulnerabilities

Products

• Caldera 13

Newest

• dadrus heimdall In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers... CVE-2026-82477 5.8 MediumAugust 29, 2026
• mitre caldera In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE)... CVE-2025-27364 EPSS 25.9% 10.0 CriticalFebruary 24, 2025
• mitre caldera Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of... CVE-2023-51792 Fix available 3.3 LowApril 19, 2024
• mitre caldera MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents. CVE-2022-41139 5.4 MediumOctober 17, 2022
• mitre caldera MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605. CVE-2022-40606 6.1 MediumOctober 17, 2022
• mitre caldera MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606. CVE-2022-40605 6.1 MediumOctober 17, 2022
• cveproject cve-services Potential secrets being logged to disk in CVE Services CVE-2022-31004 7.5 HighMay 25, 2022
• mitre cve services controller/org.controller/org.controller.js in the CVE Services API 1.1.1 before... CVE-2021-46561 7.2 HighJanuary 26, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that... CVE-2021-42559 Public exploit 8.8 HighJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS... CVE-2021-42558 Public exploit 6.1 MediumJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG"... CVE-2021-42560 Public exploit 8.8 HighJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized... CVE-2021-42561 Public exploit EPSS 19.6% 8.8 HighJanuary 12, 2022
• mitre caldera An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges,... CVE-2021-42562 Public exploit 8.1 HighJanuary 12, 2022
• mitre caldera A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier allows... CVE-2020-19907 8.8 HighJuly 12, 2021
• mitre caldera CALDERA 2.7.0 allows XSS via the Operation Name box. CVE-2020-14462 5.4 MediumJune 19, 2020
• mitre caldera auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a... CVE-2020-10807 5.3 MediumMarch 22, 2020
• mitre sezhoo PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote... CVE-2008-4704 Public exploit 10.0 HighOctober 23, 2008