Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A flaw has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium4.8HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths.Check if you run itEPSS 0.40%Dec 9, 2025
- Critical9.0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check if you run itEPSS 1.02%Dec 9, 2025
- High7.8Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.36%Dec 9, 2025
- Medium5.5Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%Dec 9, 2025
- High7.0Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Dec 9, 2025
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.52%Dec 9, 2025
- High7.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.43%Dec 9, 2025
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.56%Dec 9, 2025
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.66%Dec 9, 2025
- High8.8Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.74%Dec 9, 2025
- Critical9.3Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET RemotiCheck if you run itEPSS 0.95%Dec 9, 2025
- High7.1Legality WHISTLEBLOWING by DigitalPA contains a protection mechanism failure in which critical HTTP security headers are not emitted by default.Check if you run itEPSS 0.45%Dec 9, 2025
- High8.5MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution.Check if you run itEPSS 0.19%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
Sort