Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution oCheck this weekEPSS 37.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user toCheck this weekEPSS 40.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck this weekEPSS 39.00%May 5, 2025
- High8.6Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.Check if you run itEPSS 0.32%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to caCheck this weekEPSS 38.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.Check this weekEPSS 36.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources.Check this weekEPSS 16.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources.Check this weekEPSS 15.00%May 1, 2025
- Medium6.5Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attackerCheck if you run itEPSS 0.29%Apr 30, 2025
- High7.6A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files.Check if you run itEPSS 0.48%Apr 30, 2025
- High8.4Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English.Check if you run itEPSS 0.21%Apr 28, 2025
- Low2.5NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in aCheck this weekEPSS 17.00%Apr 22, 2025
- High7.3A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input pathCheck this weekEPSS 62.00%Apr 22, 2025
- Medium5.9User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potenCheck this weekEPSS 33.00%Apr 21, 2025
- Medium5.6Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.Check this weekEPSS 39.00%Apr 21, 2025
- Medium5.5Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.ThCheck this weekEPSS 29.00%Apr 21, 2025
- High8.1The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.Check if you run itEPSS 0.14%Apr 21, 2025
- High7.8When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories.Check this weekEPSS 15.00%Apr 18, 2025
- High7.0Uncontrolled Search Path Element vulnerability in OpenText Secure Content Manager on Windows allows DLL Side-Loading.This issue affects Secure Content Manager: 23.4.Check this weekEPSS 19.00%Apr 17, 2025
- High8.1Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directoryCheck if you run itEPSS 0.24%Apr 17, 2025
- High7.8Omnissa Horizon Client for Windows contains an LPE Vulnerability.Check this weekEPSS 16.00%Apr 16, 2025
- High8.8Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.50%Apr 16, 2025
- Medium6.1A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading tCheck if you run itEPSS 0.35%Apr 16, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 23.33%Apr 3, 2025