Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.61%Oct 14, 2025
- Medium6.5External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 1.14%Oct 14, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.97%Oct 14, 2025
- Medium4.9An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.38%Oct 14, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.97%Oct 14, 2025
- High7.4Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate priviCheck if you run itEPSS 0.26%Oct 14, 2025
- Medium5.5Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.66%Oct 14, 2025
- High7.0Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.Check if you run itEPSS 0.31%Oct 14, 2025
- Medium6.1Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.Check if you run itEPSS 3.07%Oct 14, 2025
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.61%Oct 14, 2025
- Medium6.1Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.Check if you run itEPSS 0.85%Oct 14, 2025
- Medium5.5Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.51%Oct 14, 2025
- Medium6.8Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over anCheck if you run itEPSS 0.68%Oct 14, 2025
- Critical9.9Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.Check this weekEPSS 66.53%Oct 14, 2025
- High7.3Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.61%Oct 14, 2025
- High8.4Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.Check if you run itEPSS 0.36%Oct 14, 2025
- Medium4.9Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.35%Oct 14, 2025
- Medium4.9Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.35%Oct 14, 2025
- Medium4.9Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems.Check if you run itEPSS 0.35%Oct 14, 2025
- Medium6.0A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot information.Check if you run itEPSS 0.14%Oct 14, 2025
- Medium6.2An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system.Check if you run itEPSS 1.21%Oct 14, 2025
- Medium6.5Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor.Check if you run itEPSS 0.36%Oct 14, 2025
- Medium6.5Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor.Check if you run itEPSS 0.36%Oct 14, 2025
- Medium6.5Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor.Check if you run itEPSS 0.36%Oct 14, 2025
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Commands Connectors configuration modules) aCheck if you run itEPSS 0.21%Oct 14, 2025
Sort