Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0CWE-1392: Use of Default CredentialsCheck if you run itEPSS 0.34%Sep 9, 2025
- Critical9.8CWE-1242: Inclusion of Undocumented FeaturesCheck if you run itEPSS 0.34%Sep 9, 2025
- Critical10.0XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.Check if you run itEPSS 0.73%Sep 9, 2025
- Critical9.1Use of Default Cryptographic Key (CWE-1394)Check if you run itEPSS 0.30%Sep 9, 2025
- Critical10.0XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.Check if you run itEPSS 0.73%Sep 9, 2025
- Medium5.3Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024Check if you run itEPSS 0.23%Sep 9, 2025
- Critical9.8Multiple CWE-78Check if you run itEPSS 0.56%Sep 9, 2025
- High8.4CWE-798 Use of Hard-coded CredentialsCheck if you run itEPSS 0.14%Sep 9, 2025
- Critical10.0XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.Check if you run itEPSS 0.79%Sep 9, 2025
- Medium6.9lmsys sglang Improper Input ValidationPatch nowKEVEPSS 0.41%Sep 9, 2025
- Critical10.0XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.Check if you run itEPSS 1.05%Sep 9, 2025
- High7.8Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directoriesCheck if you run itEPSS 0.22%Sep 9, 2025
- Medium5.3Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support.This issue affects Majestic Support: from n/a through <= 1.1.0.Check if you run itEPSS 0.29%Sep 9, 2025
- High8.8Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.42%Sep 9, 2025
- Medium4.3Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.95%Sep 9, 2025
- Medium6.7Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.48%Sep 9, 2025
- High7.8Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.51%Sep 9, 2025
- High7.3Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.77%Sep 9, 2025
- Medium5.5Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.64%Sep 9, 2025
- High7.3Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.53%Sep 9, 2025
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate pCheck if you run itEPSS 0.29%Sep 9, 2025
- High7.0Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.38%Sep 9, 2025
- Medium4.3Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.96%Sep 9, 2025
- Medium6.7Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.51%Sep 9, 2025
- High7.4Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.41%Sep 9, 2025
Sort