Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.Check if you run itEPSS 0.33%Nov 5, 2025
- Medium5.4Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack againsCheck if you run itEPSS 0.21%Nov 5, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device.Check if you run itEPSS 0.30%Nov 5, 2025
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack againsCheck if you run itEPSS 0.21%Nov 5, 2025
- Medium5.4Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack againsCheck if you run itEPSS 3.86%Nov 5, 2025
- High8.4Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.Check if you run itEPSS 0.65%Nov 5, 2025
- Medium4.3A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system.Check if you run itEPSS 0.27%Nov 5, 2025
- Medium6.5A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files.Check if you run itEPSS 0.39%Nov 5, 2025
- Medium6.5A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files.Check if you run itEPSS 0.48%Nov 5, 2025
- Medium4.9A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources.Check if you run itEPSS 1.14%Nov 5, 2025
- Critical9.4A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain admiCheck if you run itEPSS 0.92%Nov 5, 2025
- Critical9.8A vulnerability in the Java Remote Method Invocation (RMI) process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrCheck if you run itEPSS 0.87%Nov 5, 2025
- High8.6A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attaCheck if you run itEPSS 0.71%Nov 5, 2025
- High8.4Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.Check if you run itEPSS 1.02%Nov 5, 2025
- Critical9.1Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell.Check if you run itEPSS 0.38%Nov 5, 2025
- Critical9.1An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check this weekEPSS 19.26%Nov 5, 2025
- High7.5An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check if you run itEPSS 1.91%Nov 5, 2025
- Critical9.8A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2.Check if you run itEPSS 1.09%Nov 5, 2025
- High7.5A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1.Check if you run itEPSS 0.64%Nov 5, 2025
- High7.5A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1.Check if you run itEPSS 0.64%Nov 5, 2025
- High7.5A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2.Check if you run itEPSS 0.61%Nov 5, 2025
- Medium6.7An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper input validation in the CarbonAppUploader admin service endpoint.Check if you run itEPSS 0.91%Nov 5, 2025
- Medium4.2HCL BigFix Query is affected by a sensitive information disclosure in the WebUI Query application.Check if you run itEPSS 0.17%Nov 5, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityPatch nowKEVEPSS 4.04%Nov 5, 2025
- High8.1The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'args[extra_template_Check if you run itEPSS 0.64%Nov 5, 2025
Sort