Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one.Check this weekEPSS 15.00%May 29, 2025
- Medium5.8APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally.Check if you run itEPSS 0.18%May 29, 2025
- Critical10.0Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.Check this weekEPSS 40.00%May 29, 2025
- Critical9.8IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamicallyCheck if you run itEPSS 1.03%May 28, 2025
- Critical9.1Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data.Check this weekEPSS 43.00%May 28, 2025
- Medium5.0Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assignment for a Critical Resource.Check this weekEPSS 25.00%May 28, 2025
- Medium4.8On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Check if you run itEPSS 0.15%May 27, 2025
- Low2.9In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock.Check this weekEPSS 25.00%May 24, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami ogami allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.78%May 23, 2025
- High8.0A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution.Check this weekEPSS 26.00%May 23, 2025
- Critical9.1PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.Check this weekEPSS 30.00%May 23, 2025
- Critical9.8An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution.Check this weekEPSS 69.00%May 23, 2025
- Medium4.8A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0.Check this weekEPSS 44.00%May 21, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issuCheck if you run itEPSS 0.35%May 19, 2025
- Medium6.0ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering.Check if you run itEPSS 0.11%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce woo-dynamic-pricing-discounts-lite allows Cross Site Request FoCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects BrCheck if you run itEPSS 0.19%May 19, 2025
- High7.8Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticallCheck if you run itEPSS 0.59%May 16, 2025
- Medium4.3The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSCheck this weekEPSS 19.00%May 15, 2025
- Medium5.4The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wCheck this weekEPSS 32.00%May 15, 2025
- Medium6.9A vulnerability was found in projectworlds Online Examination System 1.0.Check this weekEPSS 56.00%May 15, 2025
- Medium5.4Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access.Check this weekEPSS 14.00%May 13, 2025
- Medium6.3Kirby is an open-source content management system.Check if you run itEPSS 0.59%May 13, 2025
- Medium6.3Kirby is an open-source content management system.Check if you run itEPSS 0.71%May 13, 2025
- High7.5APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means.Check this weekEPSS 13.00%May 13, 2025