Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with…Check if you run itEPSS 0.50%Apr 15, 2026
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrativ…Check if you run itEPSS 0.17%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Critical9.3The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administ…Check if you run itEPSS 0.50%Apr 15, 2026
- High7.2In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the Splunk index or possesses the high-privilege capability could view users ses…Check if you run itEPSS 0.28%Apr 15, 2026
- Medium6.1The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.13%Apr 15, 2026
- High8.8The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.52%Apr 15, 2026
- Medium6.1The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0.Check if you run itEPSS 0.21%Apr 15, 2026
- Critical9.8The Visa Acceptance Solutions plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.1.0.Check if you run itEPSS 0.84%Apr 15, 2026
- High7.2An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with…Check if you run itEPSS 0.33%Apr 15, 2026
- Medium4.3The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in version 1.0.Check if you run itEPSS 0.23%Apr 15, 2026
- High7.8It has been identified that a vulnerability (CWE-427) exists in the UPS (Uninterruptible Power Supply) management application, whereby improper permissions on the inst…Check if you run itEPSS 0.14%Apr 15, 2026
- Medium6.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.78%Apr 15, 2026
- Medium6.9Serendipity is a PHP-powered weblog engine.Check if you run itEPSS 0.30%Apr 15, 2026
- Medium4.4The List View Google Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event description in all versions up to, and including, 7.4.3 d…Check if you run itEPSS 0.22%Apr 15, 2026
- UnknownWordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 15.17%Apr 15, 2026
- High7.2BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database.Check if you run itEPSS 0.81%Apr 14, 2026
- High8.6Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.38%Apr 14, 2026
- High8.8Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.92%Apr 14, 2026
- High8.8Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.44%Apr 14, 2026
- Medium5.1Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.30%Apr 14, 2026
- High7.1Chamilo is an open-source learning management system (LMS).Check if you run itEPSS 0.46%Apr 14, 2026
- Medium4.9October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.33%Apr 14, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoCheck if you run itEPSS 0.36%Apr 14, 2026