Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.42%Jul 8, 2025
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.Check this weekEPSS 32.00%Jul 8, 2025
- High8.8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.Check this weekEPSS 92.00%Jul 8, 2025
- Medium4.1Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images.Check this weekEPSS 28.00%Jul 5, 2025
- High7.6During startup, the device automatically logs in the EPC2 Windows user without requesting a password.Check this weekEPSS 27.00%Jul 3, 2025
- High7.6The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker.Check this weekEPSS 13.00%Jul 3, 2025
- Medium6.5ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks against .NET remoting.Check this weekEPSS 45.00%Jul 3, 2025
- High8.4In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM prCheck this weekEPSS 19.00%Jul 1, 2025
- High7.8Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check this weekEPSS 12.00%Jul 1, 2025
- High8.5Multiple Brother driver installers for Windows contain a privilege escalation vulnerability.Check this weekEPSS 18.00%Jun 25, 2025
- High8.0Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store oCheck this weekEPSS 19.00%Jun 25, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck this weekEPSS 23.00%Jun 24, 2025
- Medium6.1A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions.Check this weekEPSS 25.00%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/ttm: fix CCS handling Crucible + recent Mesa seems to sometimes hit: GEM_BUG_ON(num_ccs_blks > NUM_CCS_Check if you run itEPSS 0.21%Jun 18, 2025
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck this weekEPSS 15.00%Jun 17, 2025
- High7.3Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsCheck this weekEPSS 13.00%Jun 17, 2025
- High7.8In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.Check this weekEPSS 20.00%Jun 16, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- Medium4.6A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (ACheck if you run itEPSS 0.46%Jun 12, 2025
- Medium5.5os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink.Check this weekEPSS 33.00%Jun 11, 2025
- Medium6.3The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.Check this weekEPSS 24.00%Jun 11, 2025
- High7.3ClipShare is a lightweight and cross-platform tool for clipboard sharing.Check if you run itEPSS 0.17%Jun 11, 2025
- Medium6.5A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saviCheck if you run itEPSS 0.58%Jun 11, 2025
- Critical9.5Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key toCheck if you run itEPSS 0.34%Jun 11, 2025
- Critical9.5Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connectCheck this weekEPSS 64.00%Jun 11, 2025