Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks.Check if you run itEPSS 0.22%Apr 15, 2026
- Medium5.5A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the…Check if you run itEPSS 0.13%Apr 15, 2026
- Medium5.3A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypas…Check if you run itEPSS 0.30%Apr 15, 2026
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCheck if you run itEPSS 6.54%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCheck this weekEPSS 10.38%Apr 15, 2026
- Medium6.0A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with…Check if you run itEPSS 0.50%Apr 15, 2026
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrativ…Check if you run itEPSS 0.17%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack agains…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium4.7A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.Check if you run itEPSS 0.20%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack again…Check if you run itEPSS 0.19%Apr 15, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows SQL…Check if you run itEPSS 0.27%Apr 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emarket-design YouTube Showcase youtube-showcase allows Stored XS…Check if you run itEPSS 0.16%Apr 15, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smar…Check if you run itEPSS 0.11%Apr 15, 2026
- Critical9.3The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the service is exposed in environments w…Check if you run itEPSS 0.31%Apr 15, 2026
- Critical9.3The vulnerability, if exploited, could allow an unauthenticated miscreant to perform operations intended only for Simulator Instructor or Simulator Developer (Administ…Check if you run itEPSS 0.39%Apr 15, 2026
- Critical9.8Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality.Check if you run itEPSS 0.97%Apr 15, 2026
- High8.6Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.Check if you run itEPSS 0.40%Apr 15, 2026
- High8.6LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling.Check if you run itEPSS 0.47%Apr 15, 2026
- High7.3Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling.Check if you run itEPSS 0.34%Apr 15, 2026
- High8.0A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system.Check if you run itEPSS 0.28%Apr 15, 2026
- High8.3Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function…Check if you run itEPSS 0.53%Apr 15, 2026
- High7.2In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to the Splunk index or possesses the high-privilege capability could view users ses…Check if you run itEPSS 0.28%Apr 15, 2026
- High7.1In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9, 10.1.2507.19, 1…Check if you run itEPSS 3.10%Apr 15, 2026
Sort