Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 5.60%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 6.02%Apr 15, 2026
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCheck if you run itEPSS 6.54%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCheck this weekEPSS 10.38%Apr 15, 2026
- Medium6.0A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with…Check if you run itEPSS 0.50%Apr 15, 2026
- Critical9.3The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administ…Check if you run itEPSS 0.50%Apr 15, 2026
- High8.6Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.Check if you run itEPSS 0.59%Apr 15, 2026
- High8.7Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.88%Apr 15, 2026
- Medium4.3The Petje.af plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.1.8.Check if you run itEPSS 0.20%Apr 15, 2026
- High7.3libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel.Check if you run itEPSS 0.21%Apr 14, 2026
- High8.6Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.57%Apr 14, 2026
- High7.1Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.78%Apr 14, 2026
- High7.1External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.45%Apr 14, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%Apr 14, 2026
- High7.5jq is a command-line JSON processor.Check if you run itEPSS 0.59%Apr 14, 2026
- Low2.0SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and…Check if you run itEPSS 0.24%Apr 14, 2026
- Medium4.9Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthor…Check if you run itEPSS 0.25%Apr 14, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.15%Apr 13, 2026
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.18%Apr 13, 2026
- High7.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.20%Apr 13, 2026
- High7.5jq is a command-line JSON processor.Check if you run itEPSS 0.79%Apr 13, 2026
- High8.1simple-git enables running native Git commands from JavaScript.Check if you run itEPSS 0.93%Apr 13, 2026
- High7.1A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.4Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization componen…Check if you run itEPSS 0.59%Apr 13, 2026
- High7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user…Check if you run itEPSS 0.35%Apr 13, 2026