Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DN…Check if you run itEPSS 0.55%Apr 1, 2026
- Medium4.3IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.12%Apr 1, 2026
- Medium5.4IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.09%Apr 1, 2026
- Critical9.8IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.37%Apr 1, 2026
- High8.2Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes.Check if you run itEPSS 0.34%Apr 1, 2026
- Medium6.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.30%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.48%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.30%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.35%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.40%Apr 1, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.45%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.33%Apr 1, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium5.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.39%Apr 1, 2026
- Medium4.7IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.9AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium5.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.39%Apr 1, 2026
- High7.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.36%Apr 1, 2026
- Medium6.8IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10…Check if you run itEPSS 0.26%Apr 1, 2026
- Medium5.4Payload is a free and open source headless content management system.Check if you run itEPSS 0.13%Apr 1, 2026
- High8.2Payload is a free and open source headless content management system.Check if you run itEPSS 0.32%Apr 1, 2026
- Critical9.8Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go.Check if you run itEPSS 0.46%Apr 1, 2026
- High7.1ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser implementation that allows attackers to read arbitrary lo…Check if you run itEPSS 0.29%Apr 1, 2026
- Low2.3A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster.Check if you run itEPSS 0.34%Apr 1, 2026
Sort