CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ivanti Endpoint Manager (EPM) Authentication Bypass and Credential Leak Vulnerability (CVE-2026-1603) Urgent Security Advisory
[Affected Scope] Ivanti Endpoint Manager (EPM) versions prior to 2024 SU5
[Impact] A remote unauthenticated attacker can bypass authentication to leak specific stored credential data, potentially leading to full infrastructure compromise
[Mitigation] Immediately upgrade Ivanti EPM to version 2024 SU5 or later, and restrict external access to the management console
ownCloud Graph API Information Disclosure and Credential Leak Vulnerability (CVE-2023-49103) Security Advisory
[Affected Scope] ownCloud graphapi app versions 0.2.0 to 0.2.0, and 0.3.0 to 0.3.0 (both containerized and non-containerized environments)
[Impact] Unauthenticated attackers can access a specific URL to execute phpinfo(), exposing sensitive environment variables including admin passwords, mail server credentials, and license keys
[Mitigation] Immediately upgrade the graphapi app to version 0.2.1 or 0.3.1 (or higher), and rotate all potentially exposed credentials