Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path.Check this weekEPSS 57.00%Apr 21, 2025
- High7.8When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories.Check this weekEPSS 15.00%Apr 18, 2025
- High7.0Uncontrolled Search Path Element vulnerability in OpenText Secure Content Manager on Windows allows DLL Side-Loading.This issue affects Secure Content Manager: 23.4.Check this weekEPSS 19.00%Apr 17, 2025
- High8.1Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directoryCheck if you run itEPSS 0.24%Apr 17, 2025
- High7.8Omnissa Horizon Client for Windows contains an LPE Vulnerability.Check this weekEPSS 16.00%Apr 16, 2025
- High8.8Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.50%Apr 16, 2025
- Medium6.1A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading tCheck if you run itEPSS 0.35%Apr 16, 2025
- High7.3BleachBit cleans files to free disk space and to maintain privacy.Check if you run itEPSS 0.24%Apr 15, 2025
- Medium6.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium6.3By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwardCheck if you run itEPSS 0.36%Apr 15, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 13.90%Apr 8, 2025
- UnknownMicrosoft Windows Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 23.33%Apr 3, 2025
- UnknownMicrosoft Windows Protection Mechanism FailurePatch nowKEVEPSS 1.21%Apr 3, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 3.10%Apr 3, 2025
- High8.3Google Chromium Mojo Sandbox Escape VulnerabilityPatch nowKEVEPSS 9.24%Mar 25, 2025
- UnknownMicrosoft Windows Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 45.77%Mar 12, 2025
- Medium5.4Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 62.27%Mar 11, 2025
- High7.0Microsoft Windows Management Console (MMC) Improper Neutralization VulnerabilityPatch nowKEVEPSS 30.39%Mar 11, 2025
- High7.8Microsoft Windows NTFS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.22%Mar 11, 2025
- Medium5.5Microsoft Windows NTFS Out-Of-Bounds Read VulnerabilityPatch nowKEVEPSS 2.02%Mar 11, 2025
- High7.8Microsoft Windows Fast FAT File System Driver Integer Overflow VulnerabilityPatch nowKEVEPSS 3.89%Mar 11, 2025
- Medium4.6Microsoft Windows NTFS Information Disclosure VulnerabilityPatch nowKEVEPSS 1.99%Mar 11, 2025
- High7.0Microsoft Windows Win32k Use-After-Free VulnerabilityPatch nowKEVEPSS 1.38%Mar 11, 2025
- High8.7Commvault Web Server Unspecified VulnerabilityPatch nowKEVEPSS 2.48%Mar 7, 2025
- UnknownMicrosoft Windows Heap-based Buffer OverflowPatch nowKEVEPSS 12.40%Mar 4, 2025