Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1SymCrypt is the core cryptographic function library currently used by Windows.Check if you run itEPSS 0.35%Apr 6, 2026
- Critical9.8Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- High7.5Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.00%Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.07%Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.75%Apr 3, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium6.5XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents.Check if you run itEPSS 1.39%Mar 31, 2026
- Low2.3OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks.Check if you run itEPSS 0.34%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 0.70%Mar 31, 2026
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 76.71%Mar 31, 2026
- Critical9.0An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers who are automating Google Chrome and Microsoft Edge using ei…Check if you run itEPSS 0.32%Mar 23, 2026
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.99%Mar 23, 2026
- Medium6.9HeidiSQL Portable 10.1.0.5464 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string i…Check if you run itEPSS 0.14%Mar 22, 2026
- Critical9.8Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.09%Mar 19, 2026
- Critical9.8Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.09%Mar 19, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Mar 19, 2026
- High8.6Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.01%Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.13%Mar 19, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.74%Mar 19, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.96%Mar 19, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.83%Mar 19, 2026
- Medium5.3Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.66%Mar 19, 2026