Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.29%Apr 1, 2026
- Critical9.8Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs.Check if you run itEPSS 0.46%Apr 1, 2026
- Unknownlinux-raspi, linux-raspi-realtime vulnerabilitiesOpen the advisoryApr 1, 2026
- Low1.1A vulnerability was identified in Enter Software Iperius Backup up to 8.7.2.Check if you run itEPSS 0.10%Apr 1, 2026
- High8.8Tina is a headless content management system.Check if you run itEPSS 0.38%Apr 1, 2026
- Medium6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.Check if you run itEPSS 0.26%Apr 1, 2026
- High7.3pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium4.9A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system.Check if you run itEPSS 0.50%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…Check if you run itEPSS 1.01%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.23%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of…Check if you run itEPSS 0.19%Apr 1, 2026
- Medium6.5A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only…Check if you run itEPSS 0.30%Apr 1, 2026
- Medium6.5Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an aut…Check if you run itEPSS 0.23%Apr 1, 2026
- High8.2Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to b…Check if you run itEPSS 0.33%Apr 1, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.Check if you run itEPSS 0.33%Apr 1, 2026
- Critical9.8TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so.Check if you run itEPSS 0.61%Apr 1, 2026
- High7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive infor…Check if you run itEPSS 0.30%Apr 1, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.Check if you run itEPSS 0.31%Apr 1, 2026
- High8.8A flaw was found in libinput.Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.9OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access…Check if you run itEPSS 0.43%Apr 1, 2026
- High8.6ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on…Check if you run itEPSS 0.41%Apr 1, 2026
Sort