Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4NVIDIA Isaac Lab contains a vulnerability in SB3 configuration parsing.Check if you run itEPSS 0.16%Oct 14, 2025
- Medium6.9A flaw has been found in itsourcecode Online Examination System 1.0.Check if you run itEPSS 0.46%Oct 14, 2025
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.83%Oct 14, 2025
- High7.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Monitoring recurrent downtime scheduler moduCheck if you run itEPSS 0.25%Oct 14, 2025
- Medium4.9Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.45%Oct 14, 2025
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to deny service locally.Check if you run itEPSS 0.21%Oct 14, 2025
- High7.0Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.24%Oct 14, 2025
- High7.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.27%Oct 14, 2025
- High7.8Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.27%Oct 14, 2025
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.19%Oct 14, 2025
- Medium4.9Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.45%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Microsoft Failover Cluster Virtual Driver allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.40%Oct 14, 2025
- Medium5.5Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally.Check if you run itEPSS 0.34%Oct 14, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.02%Oct 14, 2025
- Medium6.5External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.82%Oct 14, 2025
- High7.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.Check if you run itEPSS 0.48%Oct 14, 2025
- Medium5.5Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.Check if you run itEPSS 0.42%Oct 14, 2025
- High7.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.38%Oct 14, 2025
- Medium6.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.86%Oct 14, 2025
- High7.4Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.29%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.47%Oct 14, 2025
- High7.1Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.50%Oct 14, 2025
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locaCheck if you run itEPSS 0.20%Oct 14, 2025
- Medium5.5Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.45%Oct 14, 2025
- Medium5.0Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally.Check if you run itEPSS 0.47%Oct 14, 2025
Sort