Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.Check this weekEPSS 94.00%Aug 12, 2025
- High8.0Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.Check this weekEPSS 90.00%Aug 12, 2025
- High7.3Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.Check this weekEPSS 59.00%Aug 12, 2025
- High8.0Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.Check this weekEPSS 90.00%Aug 12, 2025
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.Check this weekEPSS 44.00%Aug 12, 2025
- High8.8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.Check this weekEPSS 99.00%Aug 12, 2025
- Medium4.5SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths.Check this weekEPSS 32.00%Aug 12, 2025
- Unknownshibboleth xmltooling Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.89%Aug 12, 2025
- High8.6Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network trafCheck this weekEPSS 30.00%Aug 11, 2025
- High8.4RARLAB WinRAR Path Traversal VulnerabilityPatch nowKEVEPSS 94.51%Aug 8, 2025
- High7.0The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate theiCheck this weekEPSS 12.00%Aug 7, 2025
- Medium5.3Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environmeCheck this weekEPSS 22.00%Aug 7, 2025
- Medium6.5MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed.Open the advisoryAug 6, 2025
- Medium5.9Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.Check this weekEPSS 20.00%Aug 6, 2025
- Critical9.3FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories.Check if you run itEPSS 2.23%Aug 5, 2025
- UnknownExposed IOCTL with Insufficient Access ControlPatch nowKEVEPSS 8.01%Aug 5, 2025
- Medium6.5An issue was discovered in CPUID cpuz.sys 1.0.5.4.Check this weekEPSS 28.00%Aug 5, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 5.97%Aug 4, 2025
- Critical9.3An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystCheck if you run itEPSS 1.49%Aug 1, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- High8.7A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin.Check if you run itEPSS 2.15%Jul 31, 2025
- Medium4.4LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation.Check this weekEPSS 18.00%Jul 27, 2025
- High8.7A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system.Check if you run itEPSS 2.07%Jul 23, 2025
- UnknownVM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not overrideCheck if you run itEPSS 0.38%Jul 21, 2025
- High7.5Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 4.93%Jul 19, 2025