Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 100.00%Jul 8, 2025
- High7.4No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 3.92%Jul 1, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in serpednet SERPed.net serped-net allows PHP Local File IncluCheck this weekEPSS 72.00%Jun 27, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck this weekEPSS 23.00%Jun 24, 2025
- High7.5Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a netCheck this weekEPSS 83.00%Jun 20, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 29.81%Jun 17, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in motov.net Ebook Store ebook-store allows Stored XSS.This issue affects Ebook SCheck this weekEPSS 20.00%Jun 17, 2025
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck this weekEPSS 15.00%Jun 17, 2025
- High7.3Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsCheck this weekEPSS 13.00%Jun 17, 2025
- Critical9.3A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.Check if you run itEPSS 0.32%Jun 12, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- Medium4.6A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (ACheck if you run itEPSS 0.46%Jun 12, 2025
- Medium5.5os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink.Check this weekEPSS 33.00%Jun 11, 2025
- Medium6.3The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.Check this weekEPSS 24.00%Jun 11, 2025
- Critical9.3Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 8.03%Jun 11, 2025
- Critical9.5Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key toCheck if you run itEPSS 0.34%Jun 11, 2025
- Critical9.5Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connectCheck this weekEPSS 64.00%Jun 11, 2025
- High8.1The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key.Check if you run itEPSS 0.38%Jun 10, 2025
- High8.2An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software.Check if you run itEPSS 0.43%Jun 10, 2025
- High7.8Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Jun 10, 2025
- High7.8Microsoft Office Path Traversal: '.../...//'Patch nowKEVEPSS 0.75%Jun 10, 2025
- High7.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 2.39%Jun 10, 2025
- High7.8Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.58%Jun 10, 2025
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.75%Jun 10, 2025
- Medium6.7Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.Check if you run itEPSS 1.68%Jun 10, 2025