Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck this weekEPSS 15.00%Jun 17, 2025
- High7.3Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsCheck this weekEPSS 13.00%Jun 17, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- Medium4.6A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (ACheck if you run itEPSS 0.46%Jun 12, 2025
- Medium5.5os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink.Check this weekEPSS 33.00%Jun 11, 2025
- Medium6.3The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.Check this weekEPSS 24.00%Jun 11, 2025
- Critical9.5Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key toCheck if you run itEPSS 0.34%Jun 11, 2025
- Critical9.5Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connectCheck this weekEPSS 64.00%Jun 11, 2025
- High8.1Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 9.86%Jun 10, 2025
- High7.8Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 1.57%Jun 10, 2025
- High8.1Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.Check this weekEPSS 23.18%Jun 10, 2025
- High7.3Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.66%Jun 10, 2025
- High7.8Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.49%Jun 10, 2025
- High7.8Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.76%Jun 10, 2025
- High7.8Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.49%Jun 10, 2025
- High8.1Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.26%Jun 10, 2025
- Medium4.4A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacCheck if you run itEPSS 0.17%Jun 10, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
- UnknownMicrosoft Windows Use After FreePatch nowKEVEPSS 16.26%Jun 10, 2025
- Medium4.6IGEL OS Use of a Key Past its Expiration Date VulnerabilityPatch nowKEVEPSS 4.93%Jun 5, 2025
- High8.0In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assCheck if you run itEPSS 0.29%Jun 2, 2025
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as tCheck this weekEPSS 41.00%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash underCheck if you run itEPSS 0.34%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.38%May 29, 2025