Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.25%Apr 15, 2026
- High8.1Weblate is a web based localization tool.Check if you run itEPSS 0.72%Apr 15, 2026
- High8.4IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug PageCheck if you run itEPSS 0.28%Apr 15, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.25%Apr 15, 2026
- Low3.1Weblate is a web based localization tool.Check if you run itEPSS 0.23%Apr 15, 2026
- Critical9.1Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token.Check if you run itEPSS 0.23%Apr 15, 2026
- High7.4Git for Windows is the Windows port of Git.Check if you run itEPSS 0.32%Apr 15, 2026
- Medium6.5JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cauCheck if you run itEPSS 0.56%Apr 15, 2026
- High7.5Missing Authorization vulnerability in Plisio Accept Cryptocurrencies with Plisio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Check if you run itEPSS 0.20%Apr 15, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Mini Ajax Cart for WooCommerce allows Stored XSS.This…Check if you run itEPSS 0.14%Apr 15, 2026
- Critical9.8A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersona…Check if you run itEPSS 0.53%Apr 15, 2026
- Medium5.3A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypas…Check if you run itEPSS 0.30%Apr 15, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows SQL…Check if you run itEPSS 0.28%Apr 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emarket-design YouTube Showcase youtube-showcase allows Stored XS…Check if you run itEPSS 0.16%Apr 15, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smar…Check if you run itEPSS 0.11%Apr 15, 2026
- Critical9.3The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments w…Check if you run itEPSS 0.32%Apr 15, 2026
- High7.5Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.Check if you run itEPSS 0.29%Apr 15, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a through < 5.1.11.Check if you run itEPSS 0.10%Apr 15, 2026
- Medium6.0A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administratiCheck if you run itEPSS 0.51%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user ofCheck if you run itEPSS 0.20%Apr 15, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affectedCheck if you run itEPSS 0.24%Apr 15, 2026
- Medium4.7A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.Check if you run itEPSS 0.21%Apr 15, 2026
- Medium6.1A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks.Check if you run itEPSS 0.23%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affecteCheck if you run itEPSS 6.13%Apr 15, 2026
- Medium5.5A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local systemCheck if you run itEPSS 0.13%Apr 15, 2026
Sort