Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- High7.0Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- High8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.40%Oct 13, 2026
- High7.0Use after free in SQL Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.20%Oct 13, 2026
- Medium5.3The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value.Check if you run itEPSS 0.32%Oct 13, 2026
- High7.8Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.19%Oct 13, 2026
- High7.8Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.25%Oct 13, 2026
- Medium6.6Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.42%Oct 13, 2026
- High7.8Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.22%Oct 13, 2026
- Medium5.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system.Check if you run itEPSS 0.14%Oct 13, 2026
- Medium6.5The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium5.3The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing th…Check if you run itEPSS 0.07%Oct 13, 2026
- Medium6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure.Check if you run itEPSS 0.13%Oct 13, 2026
- Medium6.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.55%Oct 13, 2026
- High7.5ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.86%Oct 13, 2026
- High8.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.33%Oct 13, 2026
- High7.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.59%Oct 13, 2026
- High8.4ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.40%Oct 13, 2026
- Medium6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.Check if you run itEPSS 0.26%Oct 13, 2026
- Medium6.9Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via un…Check if you run itEPSS 0.34%Oct 13, 2026
- Medium6.9Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts by sending concurrent requests.Check if you run itEPSS 0.25%Oct 13, 2026