Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.36%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.46%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.39%Apr 1, 2026
- Medium6.9File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.36%Apr 1, 2026
- Critical9.8File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.66%Apr 1, 2026
- Medium6.8IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10…Check if you run itEPSS 0.25%Apr 1, 2026
- High8.7Payload is a free and open source headless content management system.Check if you run itEPSS 0.36%Apr 1, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium4.9A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system.Check if you run itEPSS 0.49%Apr 1, 2026
- High8.0A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privi…Check if you run itEPSS 0.27%Apr 1, 2026
- High7.3A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges on an af…Check if you run itEPSS 0.27%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code…Check if you run itEPSS 0.39%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injecti…Check if you run itEPSS 0.72%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injecti…Check if you run itEPSS 0.93%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…Check if you run itEPSS 0.99%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.22%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.17%Apr 1, 2026
- Medium5.0Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own…Check if you run itEPSS 0.33%Apr 1, 2026
- Medium5.4Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other use…Check if you run itEPSS 0.28%Apr 1, 2026
- Medium4.7The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.14%Apr 1, 2026
- Medium5.3The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.26%Apr 1, 2026