Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Youki is a container runtime written in Rust.Check if you run itEPSS 0.26%Nov 5, 2025
- High8.1Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptoCheck if you run itEPSS 0.20%Nov 5, 2025
- High8.8Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authentication token for DCV-based WorkSpaceCheck if you run itEPSS 0.20%Nov 5, 2025
- Medium4.8A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c.Check if you run itEPSS 0.22%Nov 5, 2025
- Medium6.5An XML External Entity (XXE) vulnerability exists in multiple WSO2 products due to improper configuration of the XML parser.Check if you run itEPSS 0.46%Nov 5, 2025
- High7.3Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability.Check if you run itEPSS 0.14%Nov 5, 2025
- Medium6.7Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confCheck if you run itEPSS 0.14%Nov 5, 2025
- Medium6.7Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability.Check if you run itEPSS 0.10%Nov 5, 2025
- Medium5.3Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CCheck if you run itEPSS 0.37%Nov 5, 2025
- Critical9.1Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.Check if you run itEPSS 0.33%Nov 5, 2025
- Medium5.4Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack againsCheck if you run itEPSS 0.21%Nov 5, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device.Check if you run itEPSS 0.30%Nov 5, 2025
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack againsCheck if you run itEPSS 0.21%Nov 5, 2025
- Medium5.4Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack againsCheck if you run itEPSS 3.86%Nov 5, 2025
- High8.4Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.Check if you run itEPSS 0.65%Nov 5, 2025
- Medium4.3A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system.Check if you run itEPSS 0.27%Nov 5, 2025
- Medium6.5A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to upload and execute arbitrary files.Check if you run itEPSS 0.39%Nov 5, 2025
- Medium4.9A vulnerability in the web UI of Cisco Unified CCX could allow an authenticated, remote attacker to perform a directory traversal and access arbitrary resources.Check if you run itEPSS 1.14%Nov 5, 2025
- Critical9.4A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain admiCheck if you run itEPSS 0.92%Nov 5, 2025
- High8.6A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attaCheck if you run itEPSS 0.71%Nov 5, 2025
- High8.4Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.Check if you run itEPSS 1.02%Nov 5, 2025
- Critical9.1Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell.Check if you run itEPSS 0.38%Nov 5, 2025
- High7.5An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.Check if you run itEPSS 1.91%Nov 5, 2025
- High8.1The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'args[extra_template_Check if you run itEPSS 0.64%Nov 5, 2025
- Medium4.3The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inCheck if you run itEPSS 0.26%Nov 5, 2025
Sort