Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 5.10%Apr 1, 2026
- Critical9.8llama.cpp is an inference of several LLM models in C/C++.Check if you run itEPSS 1.62%Apr 1, 2026
- High7.4Clerk JavaScript is the official JavaScript repository for Clerk authentication.Check if you run itEPSS 0.32%Apr 1, 2026
- Critical9.8Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs.Check if you run itEPSS 0.46%Apr 1, 2026
- Low2.0A vulnerability was identified in Enter Software Iperius Backup up to 8.7.2.Check if you run itEPSS 0.10%Apr 1, 2026
- Medium4.9A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system.Check if you run itEPSS 0.50%Apr 1, 2026
- Critical9.8A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating systCheck if you run itEPSS 0.93%Apr 1, 2026
- High7.3A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges on an affected systemCheck if you run itEPSS 0.27%Apr 1, 2026
- High8.0A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to acceCheck if you run itEPSS 0.27%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gaCheck if you run itEPSS 1.01%Apr 1, 2026
- Medium6.5A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup filesCheck if you run itEPSS 0.30%Apr 1, 2026
- Medium6.1A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack tCheck if you run itEPSS 0.25%Apr 1, 2026
- High7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive infor…Check if you run itEPSS 0.30%Apr 1, 2026
- Medium6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.1Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.29%Apr 1, 2026
- Medium6.5An unauthenticated remote code execution (RCE) vulnerability exists in applications that use the Replicator node package manager (npm) version 1.0.5 to deserialize untrusted user iCheck if you run itEPSS 0.40%Apr 1, 2026
- High8.3Tina is a headless content management system.Check if you run itEPSS 0.42%Apr 1, 2026
- High8.8Tina is a headless content management system.Check if you run itEPSS 0.38%Apr 1, 2026
- High8.1Tina is a headless content management system.Check if you run itEPSS 0.39%Apr 1, 2026
- High7.4Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM.Check if you run itEPSS 0.13%Apr 1, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.Check if you run itEPSS 0.33%Apr 1, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium4.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (SSRF), potentCheck if you run itEPSS 0.17%Apr 1, 2026
- Medium5.0Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured MFA factors anCheck if you run itEPSS 0.26%Apr 1, 2026
- Medium5.0Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own multi-factorCheck if you run itEPSS 0.20%Apr 1, 2026
Sort