Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions.Check if you run itEPSS 0.36%Apr 14, 2026
- High7.1A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-…Check if you run itEPSS 0.20%Apr 14, 2026
- High7.1A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion d…Check if you run itEPSS 0.21%Apr 14, 2026
- High7.1A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scr…Check if you run itEPSS 0.21%Apr 14, 2026
- Medium6.1Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method.Check if you run itEPSS 0.20%Apr 14, 2026
- Medium5.3The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to reaCheck if you run itEPSS 0.13%Apr 14, 2026
- Medium6.9CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data when a Web AdmCheck if you run itEPSS 0.21%Apr 14, 2026
- Medium6.7A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.Check if you run itEPSS 0.14%Apr 14, 2026
- Medium6.9A flaw was found in Keycloak, specifically in the organization selection login page.Check if you run itEPSS 0.36%Apr 14, 2026
- Critical9.1The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.Check if you run itEPSS 0.21%Apr 14, 2026
- Medium5.7Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.Check if you run itEPSS 0.60%Apr 14, 2026
- High8.2A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of thCheck if you run itEPSS 0.31%Apr 14, 2026
- Medium5.4Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application.Check if you run itEPSS 0.20%Apr 14, 2026
- High7.4.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affecCheck if you run itEPSS 0.28%Apr 14, 2026
- Critical9.0Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a PrivilegCheck if you run itEPSS 0.31%Apr 14, 2026
- High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 6.87%Apr 14, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 77.38%Apr 14, 2026
- Critical9.1In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.infoCheck if you run itEPSS 1.36%Apr 14, 2026
- Medium5.3MCPHub in versions below 0.11.0 is vulnerable to authentication bypass.Check if you run itEPSS 0.37%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 93.19%Apr 14, 2026
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.Check if you run itEPSS 0.72%Apr 14, 2026
- Medium5.3Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Check if you run itEPSS 0.24%Apr 14, 2026
- High7.5Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium5.1A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 = V2.0.0 = V2.2.0 < V2.8.0).Check if you run itEPSS 0.21%Apr 14, 2026
- High8.7A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).Check if you run itEPSS 0.26%Apr 14, 2026
Sort