Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 9.86%Jun 10, 2025
- High7.8Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 1.57%Jun 10, 2025
- High8.1Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.Check this weekEPSS 23.18%Jun 10, 2025
- High7.3Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.66%Jun 10, 2025
- High7.8Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.49%Jun 10, 2025
- High7.8Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.76%Jun 10, 2025
- High7.8Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.49%Jun 10, 2025
- High8.1Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.26%Jun 10, 2025
- Medium4.4A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacCheck if you run itEPSS 0.17%Jun 10, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
- UnknownMicrosoft Windows Use After FreePatch nowKEVEPSS 16.26%Jun 10, 2025
- Medium6.7Local privilege escalation due to insecure file permissions.Check if you run itEPSS 0.13%Jun 4, 2025
- High7.5Denial of service due to improper handling of malformed input.Check if you run itEPSS 0.37%Jun 4, 2025
- High7.0Incorrect default permissions issue in PC Time Tracer prior to 5.2.Check if you run itEPSS 0.16%Jun 3, 2025
- High8.0In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assCheck if you run itEPSS 0.29%Jun 2, 2025
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as tCheck this weekEPSS 41.00%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash underCheck if you run itEPSS 0.34%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.38%May 29, 2025
- High7.5Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorizCheck if you run itEPSS 0.57%May 29, 2025
- Medium4.8A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0Check this weekEPSS 55.00%May 28, 2025
- Medium4.8Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code exeCheck if you run itEPSS 0.21%May 27, 2025
- High7.8In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code withCheck this weekEPSS 16.00%May 23, 2025
- High7.0When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-direCheck this weekEPSS 15.00%May 23, 2025
- Medium6.9Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUSCheck this weekEPSS 15.00%May 22, 2025