Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Check if you run itEPSS 0.40%Apr 15, 2026
- Medium5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic.Check if you run itEPSS 0.15%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.14%Apr 15, 2026
- Critical9.2CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gai…Check if you run itEPSS 0.53%Apr 15, 2026
- High8.4IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned t…Check if you run itEPSS 0.27%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.32%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.25%Apr 15, 2026
- High7.4OpenProject is an open-source project management application.Check if you run itEPSS 0.30%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.24%Apr 15, 2026
- High8.0Weblate is a web based localization tool.Check if you run itEPSS 0.71%Apr 15, 2026
- Critical9.1Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token.Check if you run itEPSS 0.22%Apr 15, 2026
- High7.4Git for Windows is the Windows port of Git.Check if you run itEPSS 0.32%Apr 15, 2026
- Critical9.8Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.Check if you run itEPSS 0.52%Apr 15, 2026
- High8.6Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint.Check if you run itEPSS 0.23%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 5.60%Apr 15, 2026
- Critical9.8A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersona…Check if you run itEPSS 0.52%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 6.02%Apr 15, 2026
- Medium5.3A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypas…Check if you run itEPSS 0.30%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCheck this weekEPSS 10.38%Apr 15, 2026
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrativ…Check if you run itEPSS 0.17%Apr 15, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack agains…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack again…Check if you run itEPSS 0.19%Apr 15, 2026
- Critical9.3The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administ…Check if you run itEPSS 0.39%Apr 15, 2026
- Critical9.8Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality.Check if you run itEPSS 0.97%Apr 15, 2026
- High8.6Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.Check if you run itEPSS 0.40%Apr 15, 2026
Sort