Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.Check if you run itEPSS 0.21%Apr 14, 2026
- Medium5.7Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.Check if you run itEPSS 0.60%Apr 14, 2026
- High8.2A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of thCheck if you run itEPSS 0.31%Apr 14, 2026
- Medium5.4Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application.Check if you run itEPSS 0.20%Apr 14, 2026
- High7.4.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affecCheck if you run itEPSS 0.28%Apr 14, 2026
- Critical9.0Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a PrivilegCheck if you run itEPSS 0.31%Apr 14, 2026
- High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 6.87%Apr 14, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 77.38%Apr 14, 2026
- Critical9.1In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.infoCheck if you run itEPSS 1.36%Apr 14, 2026
- Medium5.3MCPHub in versions below 0.11.0 is vulnerable to authentication bypass.Check if you run itEPSS 0.37%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 93.19%Apr 14, 2026
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.Check if you run itEPSS 0.72%Apr 14, 2026
- Medium5.3Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Check if you run itEPSS 0.24%Apr 14, 2026
- High7.5Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium5.1A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 = V2.0.0 = V2.2.0 < V2.8.0).Check if you run itEPSS 0.21%Apr 14, 2026
- High8.7A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).Check if you run itEPSS 0.26%Apr 14, 2026
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Check if you run itEPSS 0.46%Apr 14, 2026
- Medium6.9A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).Check if you run itEPSS 0.26%Apr 14, 2026
- Medium6.3A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), SimCheck if you run itEPSS 0.14%Apr 14, 2026
- Critical9.1Header injection vulnerability in Apache APISIX.Check if you run itEPSS 0.53%Apr 14, 2026
- Medium4.3The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability checCheck if you run itEPSS 0.18%Apr 14, 2026
- Medium6.5The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5.Check if you run itEPSS 0.43%Apr 14, 2026
- High7.2The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.Check if you run itEPSS 0.53%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.31%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.43%Apr 14, 2026
Sort