Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknown.NET Framework Elevation of Privilege VulnerabilityPatch nowKEVEPSS 2.52%Dec 8, 2025
- Medium6.2Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.Open the advisoryDec 3, 2025
- Unknownprocess: command injection via argument list on WindowsCheck if you run itEPSS 6.83%Nov 14, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- UnknownMicrosoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Oct 30, 2025
- UnknownVanDyke Software VShell for Windows Trigger Action Script VulnerabilityPatch nowKEVEPSS 31.89%Oct 20, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High7.8Microsoft Windows Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 6.37%Oct 14, 2025
- UnknownMicrosoft web_deploy_4.0 Deserialization of Untrusted DataPatch nowKEVEPSS 27.75%Oct 7, 2025
- High7.8NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks.Open the advisoryAug 28, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 23.82%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 16.78%Aug 20, 2025
- UnknownMicrosoft Windows Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 16.37%Aug 20, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 5.97%Aug 4, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- UnknownMicrosoft SharePoint Improper AuthenticationPatch nowKEVEPSS 99.86%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- Critical9.3A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configurCheck if you run itEPSS 1.93%Jul 15, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- Medium5.4Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck this weekEPSS 48.00%Jul 11, 2025
- Medium6.3No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check this weekEPSS 63.00%Jul 11, 2025
- Medium5.6Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.Check this weekEPSS 37.00%Jul 11, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, in the /rest/action API endpoint exposed by the console compoCheck if you run itEPSS 4.36%Jul 10, 2025