Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCheck if you run itEPSS 0.17%Mar 10, 2026
- Critical9.8, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes (CVE-2022-2Check if you run itEPSS 1.44%Mar 10, 2026
- High7.8Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated meCheck if you run itEPSS 0.19%Mar 10, 2026
- Medium5.5DNG SDK versions 1.7.1 2471 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.20%Mar 10, 2026
- High7.8DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.24%Mar 10, 2026
- Critical9.3Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.Check if you run itEPSS 0.84%Mar 10, 2026
- Medium6.6A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all ver…Check if you run itEPSS 0.73%Mar 10, 2026
- High7.5Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privileg…Check if you run itEPSS 0.95%Mar 10, 2026
- High8.1External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium4.7Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information…Check if you run itEPSS 1.39%Mar 10, 2026
- High7.8Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.38%Mar 10, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 2.17%Mar 10, 2026
- High7.8Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.69%Mar 10, 2026
- High7.5Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.Patch nowKEVEPSS 2.27%Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.18%Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.06%Mar 10, 2026
- High7.8Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.48%Mar 10, 2026
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.19%Mar 10, 2026
- High8.8Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.25%Mar 10, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 3.43%Mar 10, 2026
- High7.8Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.61%Mar 10, 2026
- High7.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.49%Mar 10, 2026
- High8.0Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.90%Mar 10, 2026
- High7.8Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.54%Mar 10, 2026
Sort