Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the displayed error message via a specially craftedCheck if you run itEPSS 0.60%Mar 3, 2026
- Critical9.8Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop Manager 2025.3.30 and earlier allows an authenCheck if you run itEPSS 0.46%Mar 3, 2026
- Critical9.8Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenticate as an arCheck if you run itEPSS 0.56%Mar 3, 2026
- High7.8Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.19%Mar 3, 2026
- Medium5.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.36%Mar 3, 2026
- Critical9.3A flaw has been found in D-Link DIR-868L 110b03.Check if you run itEPSS 5.31%Mar 3, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper vaCheck if you run itEPSS 0.39%Mar 3, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper vaCheck if you run itEPSS 0.39%Mar 3, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper vaCheck if you run itEPSS 0.39%Mar 3, 2026
- High8.8Dell Command | Intel vPro Out of Band, versions prior to 4.7.0, contain an Uncontrolled Search Path Element vulnerability.Check if you run itEPSS 0.20%Mar 3, 2026
- Medium5.9IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1Check if you run itEPSS 0.19%Mar 3, 2026
- High7.5IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informationCheck if you run itEPSS 0.19%Mar 3, 2026
- High7.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitCheck if you run itEPSS 0.34%Mar 3, 2026
- Medium5.5IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.Check if you run itEPSS 0.13%Mar 3, 2026
- Medium5.3A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38.Check if you run itEPSS 3.30%Mar 3, 2026
- Medium6.5IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to properly validate…Check if you run itEPSS 0.35%Mar 3, 2026
- Medium5.3IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file.Check if you run itEPSS 0.22%Mar 3, 2026
- High8.3Authentication bypass in Brocade ASCG 3.4.0 Could allow an unauthorized user to perform ASCG operations related to Brocade Support Link(BSL) and streaming configuration.Check if you run itEPSS 0.44%Mar 3, 2026
- Low3.3IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.Check if you run itEPSS 0.12%Mar 3, 2026
- High7.5IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.Check if you run itEPSS 0.28%Mar 3, 2026
- Critical9.8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using th…Check if you run itEPSS 0.20%Mar 3, 2026
- Medium5.4IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.Check if you run itEPSS 0.17%Mar 3, 2026
- High7.5IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system.Check if you run itEPSS 0.26%Mar 3, 2026
- Medium5.9IBM App Connect Operator versions CD 11.3.0 through 11.6.0 and 12.1.0 through 12.20.0, LTS versions 12.0.0 through 12.0.20, and IBM App Connect Enterprise Certified Co…Check if you run itEPSS 0.21%Mar 3, 2026
- High7.3dr_libs version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allowsCheck if you run itEPSS 0.25%Mar 3, 2026
Sort