Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser.Check if you run itEPSS 0.58%Aug 21, 2025
- Critical9.3EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface.Check if you run itEPSS 2.32%Aug 21, 2025
- Critical9.3EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser.Check if you run itEPSS 4.63%Aug 21, 2025
- High8.4Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser.Check if you run itEPSS 0.49%Aug 21, 2025
- High8.6CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within theCheck if you run itEPSS 1.69%Aug 21, 2025
- High8.7Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_helCheck if you run itEPSS 1.68%Aug 21, 2025
- High8.4AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos.Playlist COM object.Check if you run itEPSS 0.60%Aug 21, 2025
- Critical9.3Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters.Check if you run itEPSS 1.67%Aug 21, 2025
- High7.1The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publication targets of type Text File or HDFS) to upload and persist fiCheck if you run itEPSS 0.29%Aug 21, 2025
- High7.1The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets) to retrieve sensitive information that could then be used toCheck if you run itEPSS 0.37%Aug 21, 2025
- High7.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.50%Aug 21, 2025
- Medium5.3Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.51%Aug 21, 2025
- High7.8Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.36%Aug 21, 2025
- Critical9.1Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.61%Aug 21, 2025
- Critical9.8Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.67%Aug 21, 2025
- Medium5.3An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.Check if you run itEPSS 0.28%Aug 21, 2025
- Medium5.3An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise.Check if you run itEPSS 0.36%Aug 21, 2025
- Critical9.3A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi ElectricCheck if you run itEPSS 0.72%Aug 21, 2025
- High8.7Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system resources.Check if you run itEPSS 0.34%Aug 21, 2025
- Medium4.8There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malCheck if you run itEPSS 0.22%Aug 21, 2025
- Medium4.8There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malCheck if you run itEPSS 0.22%Aug 21, 2025
- Medium4.8There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malCheck if you run itEPSS 0.22%Aug 21, 2025
- Medium4.8A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to addCheck if you run itEPSS 0.19%Aug 21, 2025
- High7.8Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability.Check if you run itEPSS 0.15%Aug 21, 2025
- Medium5.3Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.12%Aug 21, 2025
Sort