Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%Feb 10, 2026
- Medium6.5Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network.Check if you run itEPSS 1.00%Feb 10, 2026
- High7.8Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%Feb 10, 2026
- High7.5Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.00%Feb 10, 2026
- High7.3Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.73%Feb 10, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate pCheck if you run itEPSS 0.27%Feb 10, 2026
- High7.0Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.36%Feb 10, 2026
- High7.3Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.Check if you run itEPSS 0.58%Feb 10, 2026
- High7.3Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.Check if you run itEPSS 1.31%Feb 10, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.50%Feb 10, 2026
- Medium5.5Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.63%Feb 10, 2026
- High7.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.55%Feb 10, 2026
- Medium6.5Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 1.01%Feb 10, 2026
- Medium4.7Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.37%Feb 10, 2026
- High7.5SiYuan is a personal knowledge management system.Check if you run itEPSS 0.60%Feb 10, 2026
- Critical9.3EverShop is a TypeScript-first eCommerce platform.Check if you run itEPSS 0.37%Feb 10, 2026
- Medium6.1Frappe is a full-stack web application framework.Check if you run itEPSS 0.19%Feb 10, 2026
- Medium6.9Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection.Check if you run itEPSS 0.32%Feb 10, 2026
- High8.8Worklenz is a project management tool.Check if you run itEPSS 0.42%Feb 10, 2026
- Medium6.9A path traversal vulnerability was identified TP-Link Tapo C260 v1, D235 v1, C211 v2 and C520WS v2.6 within the HTTP server’s handling of GET requests.Check if you run itEPSS 0.80%Feb 10, 2026
- Medium6.4Zed is a multiplayer code editor.Check if you run itEPSS 0.29%Feb 10, 2026
- High8.7On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization.Check this weekEPSS 23.31%Feb 10, 2026
- High7.2On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint.Check if you run itEPSS 0.44%Feb 10, 2026
- Critical9.3ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.33%Feb 10, 2026
- High7.5Emmett is a framework designed to simplify your development process.Check if you run itEPSS 0.32%Feb 10, 2026
Sort