Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorizCheck if you run itEPSS 0.57%May 29, 2025
- Medium4.8A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0Check this weekEPSS 55.00%May 28, 2025
- Medium4.8Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code exeCheck if you run itEPSS 0.21%May 27, 2025
- High7.8In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code withCheck this weekEPSS 16.00%May 23, 2025
- High7.0When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-direCheck this weekEPSS 15.00%May 23, 2025
- Medium6.9Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUSCheck this weekEPSS 15.00%May 22, 2025
- Medium5.5Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 22.00%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 23.00%May 22, 2025
- Medium4.1Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNXCheck this weekEPSS 10.68%May 22, 2025
- Medium4.3Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input DCheck this weekEPSS 30.00%May 22, 2025
- Medium5.4Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data MaCheck this weekEPSS 53.00%May 22, 2025
- Medium5.3Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input DataCheck this weekEPSS 36.00%May 22, 2025
- Medium5.3Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check this weekEPSS 32.00%May 22, 2025
- Medium6.8Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check this weekEPSS 35.00%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 24.00%May 22, 2025
- High7.7Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, LinuxCheck this weekEPSS 36.00%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 23.00%May 22, 2025
- Medium6.5Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting IncorrCheck this weekEPSS 39.00%May 22, 2025
- Low3.3GitHub Desktop is an open-source, Electron-based GitHub app designed for git development.Check this weekEPSS 18.00%May 21, 2025
- Medium5.7Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: beforCheck this weekEPSS 17.00%May 21, 2025
- Medium5.9Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affCheck this weekEPSS 12.00%May 21, 2025
- High7.3Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and tCheck if you run itEPSS 0.21%May 16, 2025
- High8.2Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).Check if you run itEPSS 0.18%May 16, 2025
- High7.0The WebAssembly Micro Runtime's (WAMR) iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface (WASI) and command line interface.Check this weekEPSS 29.00%May 15, 2025
- Low3.9Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: fCheck this weekEPSS 15.00%May 15, 2025