Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access.Check if you run itEPSS 0.12%Aug 12, 2025
- Medium5.4Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via localCheck if you run itEPSS 0.13%Aug 12, 2025
- Critical9.4WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.Check if you run itEPSS 0.54%Aug 12, 2025
- Medium5.1savg-sanitizer is a PHP SVG/XML sanitizer.Check if you run itEPSS 0.51%Aug 12, 2025
- Medium5.3ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform.Check if you run itEPSS 0.35%Aug 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaCheck if you run itEPSS 0.16%Aug 12, 2025
- Critical9.1Kanboard is project management software that focuses on the Kanban methodology.Check if you run itEPSS 0.94%Aug 12, 2025
- Medium6.9Hydra is a continuous integration service for Nix based projects.Check if you run itEPSS 0.38%Aug 12, 2025
- High7.1Hydra is a continuous integration service for Nix based projects.Check if you run itEPSS 0.20%Aug 12, 2025
- Medium5.5Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and IvaCheck if you run itEPSS 0.36%Aug 12, 2025
- Medium4.9XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.Check if you run itEPSS 0.68%Aug 12, 2025
- High7.5A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons forCheck if you run itEPSS 1.14%Aug 12, 2025
- High7.5A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti NeuronsCheck if you run itEPSS 1.12%Aug 12, 2025
- High8.1Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.Check if you run itEPSS 0.41%Aug 12, 2025
- Medium6.5Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accountsCheck if you run itEPSS 0.83%Aug 12, 2025
- High7.2Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code executionCheck if you run itEPSS 1.26%Aug 12, 2025
- High7.2SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries.Check if you run itEPSS 1.13%Aug 12, 2025
- Medium6.3EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means.Check if you run itEPSS 0.21%Aug 12, 2025
- High7.3APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access.Check if you run itEPSS 0.09%Aug 12, 2025
- Medium4.2AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing.Check if you run itEPSS 0.13%Aug 12, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Check if you run itEPSS 0.22%Aug 12, 2025
- High7.5A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions).Check if you run itEPSS 0.12%Aug 12, 2025
- High7.5A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.15%Aug 12, 2025
- High7.0A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.14%Aug 12, 2025
- High8.8A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.13%Aug 12, 2025
Sort