Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory.Check if you run itEPSS 0.49%Oct 13, 2026
- Critical10.0ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.70%Oct 13, 2026
- Critical9.1ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…Check if you run itEPSS 0.68%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium6.0FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body.Check if you run itEPSS 0.25%Oct 13, 2026
- Critical9.0ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.63%Oct 13, 2026
- High7.1FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes…Check if you run itEPSS 0.32%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.18%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.15%Oct 13, 2026
- UnknownFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.6ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read.Check if you run itEPSS 0.53%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliCheck if you run itEPSS 0.26%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.15%Oct 13, 2026
- High7.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.17%Oct 13, 2026
- High8.8ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.86%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.44%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.15%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.20%Oct 13, 2026
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.36%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…Check if you run itEPSS 0.52%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.15%Oct 13, 2026
- High7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.51%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.55%Oct 13, 2026
- High8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.3A flaw has been found in Colorful iGameCenter 2.0.0.82.Check if you run itEPSS 0.15%Oct 13, 2026