Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.4An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access.Check if you run itEPSS 0.12%Jun 11, 2025
- Low2.4Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service.Check if you run itEPSS 0.13%Jun 11, 2025
- Medium6.3The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.Check if you run itEPSS 0.24%Jun 11, 2025
- High7.3ClipShare is a lightweight and cross-platform tool for clipboard sharing.Check if you run itEPSS 0.17%Jun 11, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Lightgallery allows Cross-Site Scripting (XSS).This issue affects LightCheck if you run itEPSS 0.33%Jun 11, 2025
- Medium6.5Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1Check if you run itEPSS 0.31%Jun 11, 2025
- High8.8Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3.Check if you run itEPSS 0.33%Jun 11, 2025
- High8.2pgjdbc is an open source postgresql JDBC Driver.Check if you run itEPSS 0.49%Jun 11, 2025
- High8.8Incorrect Authorization vulnerability in Drupal Commerce Eurobank (Redirect) allows Functionality Misuse.This issue affects Commerce Eurobank (Redirect): from 0.0.0 before 2.1.1.Check if you run itEPSS 0.32%Jun 11, 2025
- Medium6.7IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program.Check if you run itEPSS 0.14%Jun 11, 2025
- Medium5.3IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accouCheck if you run itEPSS 0.34%Jun 11, 2025
- Medium5.3Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.Check if you run itEPSS 0.27%Jun 11, 2025
- Medium5.3Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0.Check if you run itEPSS 0.27%Jun 11, 2025
- Critical9.8Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.Check if you run itEPSS 0.54%Jun 11, 2025
- Medium6.6A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability.Check if you run itEPSS 0.20%Jun 11, 2025
- High8.1Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing.Check if you run itEPSS 0.51%Jun 11, 2025
- Critical9.3Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 9.29%Jun 11, 2025
- Medium5.5A password is exposed locally.Check if you run itEPSS 0.22%Jun 11, 2025
- Medium6.4The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-date-*’ parameters in all versions up to, and including, 6.13.2 due to insufCheck if you run itEPSS 0.27%Jun 11, 2025
- Medium6.5A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saviCheck if you run itEPSS 0.58%Jun 11, 2025
- Critical9.8An integer overflow was present in used by the JavaScript engine.Check if you run itEPSS 0.74%Jun 11, 2025
- High7.8A vulnerability in Mozilla VPN on macOS allows privilege escalation from a normal user to root.Check if you run itEPSS 0.13%Jun 11, 2025
- Critical9.8Certain canvas operations could have lead to memory corruption.Check if you run itEPSS 0.66%Jun 11, 2025
- Low3.1Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information abCheck if you run itEPSS 0.22%Jun 11, 2025
- Medium4.1Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administraCheck if you run itEPSS 0.28%Jun 11, 2025
Sort