Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.Check if you run itEPSS 0.45%Oct 13, 2026
- Critical9.3ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.0Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.18%Oct 13, 2026
- Medium5.3Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium6.4Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.19%Oct 13, 2026
- Medium5.3Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.Check if you run itEPSS 0.45%Oct 13, 2026
- High7.5Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.35%Oct 13, 2026
- High7.0Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- High7.0Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- High8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.40%Oct 13, 2026
- High7.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.20%Oct 13, 2026
- Medium5.3The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value.Check if you run itEPSS 0.32%Oct 13, 2026
- High7.8Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.19%Oct 13, 2026
- High7.8Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.25%Oct 13, 2026
- Medium6.6Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.42%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.22%Oct 13, 2026
- Medium5.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium6.5The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium5.3The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing th…Check if you run itEPSS 0.07%Oct 13, 2026
- Medium6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure.Check if you run itEPSS 0.13%Oct 13, 2026
- Medium6.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.55%Oct 13, 2026