Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Tmds.DBus provides .NET libraries for working with D-Bus from .NET.Check if you run itEPSS 0.13%Apr 9, 2026
- Medium6.5Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page.Check if you run itEPSS 0.29%Apr 8, 2026
- Critical9.8A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b.Check if you run itEPSS 1.38%Apr 7, 2026
- Medium6.1SymCrypt is the core cryptographic function library currently used by Windows.Check if you run itEPSS 0.35%Apr 6, 2026
- Critical9.8Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.6The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property.Check if you run itEPSS 0.59%Apr 3, 2026
- Medium5.6Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.Check if you run itEPSS 0.14%Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- High7.5Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.00%Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.07%Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.75%Apr 3, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.Check if you run itEPSS 0.46%Apr 1, 2026
- Medium6.5XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents.Check if you run itEPSS 1.39%Mar 31, 2026
- High8.6A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.Check if you run itEPSS 0.10%Mar 31, 2026
- Medium5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.Check if you run itEPSS 0.18%Mar 31, 2026
- Low2.3OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks.Check if you run itEPSS 0.34%Mar 31, 2026
- UnknownMicrosoft .NET Framework Improper Input ValidationPatch nowKEVEPSS 76.71%Mar 31, 2026
- High8.1Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) d…Check if you run itEPSS 0.43%Mar 27, 2026
- High7.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.Check if you run itEPSS 0.18%Mar 27, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.Check if you run itEPSS 0.15%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.Check if you run itEPSS 0.18%Mar 26, 2026
- UnknownMicrosoft Windows Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 95.99%Mar 23, 2026