Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injecti…Check if you run itEPSS 0.95%Apr 1, 2026
- High8.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection…Check if you run itEPSS 1.14%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…Check if you run itEPSS 1.01%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.23%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of…Check if you run itEPSS 0.19%Apr 1, 2026
- Medium6.5A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only…Check if you run itEPSS 0.30%Apr 1, 2026
- Medium6.1A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (S…Check if you run itEPSS 0.25%Apr 1, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.16%Apr 1, 2026
- Critical9.8A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.Check if you run itEPSS 1.59%Apr 1, 2026
- Critical9.8There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on component…Check if you run itEPSS 0.54%Apr 1, 2026
- High7.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 5.10%Apr 1, 2026
- Medium5.0Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured M…Check if you run itEPSS 0.26%Apr 1, 2026
- Medium4.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (…Check if you run itEPSS 0.17%Apr 1, 2026
- Medium6.5Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an aut…Check if you run itEPSS 0.23%Apr 1, 2026
- Medium5.0Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own…Check if you run itEPSS 0.20%Apr 1, 2026
- High8.2Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to b…Check if you run itEPSS 0.33%Apr 1, 2026
- Medium5.4Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other use…Check if you run itEPSS 0.17%Apr 1, 2026
- High8.2Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multi-fa…Check if you run itEPSS 0.26%Apr 1, 2026
- High7.4Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM.Check if you run itEPSS 0.13%Apr 1, 2026
- Critical9.8TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so.Check if you run itEPSS 0.61%Apr 1, 2026
- Medium4.7The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.15%Apr 1, 2026
- High7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive infor…Check if you run itEPSS 0.30%Apr 1, 2026
Sort