Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the passworCheck if you run itEPSS 0.28%May 14, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title pCheck if you run itEPSS 0.28%May 14, 2025
- Critical9.1An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, Modem 51Check if you run itEPSS 0.47%May 14, 2025
- Medium6.5An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000, MCheck if you run itEPSS 0.28%May 14, 2025
- High7.5An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Modem 5300, and Modem 5400.Check if you run itEPSS 0.43%May 14, 2025
- Medium4.6An issue in realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting functioCheck if you run itEPSS 0.23%May 14, 2025
- High8.1Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode.Check if you run itEPSS 0.24%May 14, 2025
- Medium5.4Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, alloCheck if you run itEPSS 1.28%May 14, 2025
- Medium5.5An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file.Check if you run itEPSS 0.16%May 14, 2025
- High8.8Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-suppliCheck this weekEPSS 12.73%May 14, 2025
- Medium5.4Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php.Check if you run itEPSS 8.52%May 14, 2025
- Medium6.1An issue was discovered in Zimbra Collaboration (ZCS) 9.0.0 before Patch 43, 10.0.x before 10.0.12, 10.1.x before 10.1.4, and 8.8.15 before Patch 47.Check if you run itEPSS 0.43%May 14, 2025
- Medium6.5In crossbeam-channel rust crate, the internal type's method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.Check if you run itEPSS 0.56%May 13, 2025
- High8.0External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 1.27%May 13, 2025
- Medium5.6Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when using Intel(R) Trust Domain Extensions (Intel(R) TDX) or InCheck if you run itEPSS 0.14%May 13, 2025
- Medium5.4Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access.Check if you run itEPSS 0.16%May 13, 2025
- Medium5.4Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilegeCheck if you run itEPSS 0.16%May 13, 2025
- Medium5.4Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access.Check if you run itEPSS 0.14%May 13, 2025
- Medium5.4Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escaCheck if you run itEPSS 0.16%May 13, 2025
- Medium5.2Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service vCheck if you run itEPSS 0.15%May 13, 2025
- Medium6.9Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial oCheck if you run itEPSS 0.15%May 13, 2025
- Medium5.7Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) ProcesCheck if you run itEPSS 0.27%May 13, 2025
- Medium5.7Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticatCheck if you run itEPSS 0.20%May 13, 2025
- Medium5.8Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enableCheck if you run itEPSS 0.13%May 13, 2025
- Medium5.4Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.Check if you run itEPSS 0.16%May 13, 2025
Sort