Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…Check if you run itEPSS 1.01%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.23%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of…Check if you run itEPSS 0.19%Apr 1, 2026
- Medium6.5A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only…Check if you run itEPSS 0.30%Apr 1, 2026
- Medium6.1A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (S…Check if you run itEPSS 0.25%Apr 1, 2026
- Critical9.8A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.Check if you run itEPSS 1.59%Apr 1, 2026
- Critical9.8There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on component…Check if you run itEPSS 0.54%Apr 1, 2026
- Medium5.0Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured M…Check if you run itEPSS 0.26%Apr 1, 2026
- Medium4.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (…Check if you run itEPSS 0.17%Apr 1, 2026
- Medium6.5Exposure of sensitive information in the users MFA feature in Devolutions Server allows users with user management privileges to obtain other users OTP keys via an aut…Check if you run itEPSS 0.23%Apr 1, 2026
- Medium5.0Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own…Check if you run itEPSS 0.20%Apr 1, 2026
- High8.2Improper authentication in the two-factor authentication (2FA) feature in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to b…Check if you run itEPSS 0.33%Apr 1, 2026
- Medium5.4Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other use…Check if you run itEPSS 0.17%Apr 1, 2026
- High8.2Improper authentication in the OAuth login functionality in Devolutions Server 2026.1.11 and earlier allows a remote attacker with valid credentials to bypass multi-fa…Check if you run itEPSS 0.26%Apr 1, 2026
- High7.4Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM.Check if you run itEPSS 0.13%Apr 1, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.Check if you run itEPSS 0.33%Apr 1, 2026
- Critical9.8TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so.Check if you run itEPSS 0.61%Apr 1, 2026
- Medium4.7The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium5.3The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.27%Apr 1, 2026
- High7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive infor…Check if you run itEPSS 0.30%Apr 1, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0.Check if you run itEPSS 0.26%Apr 1, 2026
Sort