Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.48%Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.24%Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.40%Apr 24, 2026
- High8.3Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file.Check if you run itEPSS 0.22%Apr 23, 2026
- High8.4The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (Can…Check if you run itEPSS 0.18%Apr 23, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.33%Apr 23, 2026
- High8.5Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binar…Check if you run itEPSS 0.10%Apr 22, 2026
- Medium6.9KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there is an error in the mechanism (KUniqueService) fo…Check if you run itEPSS 0.16%Apr 21, 2026
- Critical9.8An incorrect authorization vulnerability exists in Esri Portal for ArcGIS 11.4, 11.5 and 12.0 on Windows, Linux and Kubernetes that did not correctly check permissions…Check if you run itEPSS 0.48%Apr 21, 2026
- High7.2An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer cred…Check if you run itEPSS 0.47%Apr 21, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Check if you run itEPSS 0.60%Apr 21, 2026
- High7.1Apktool is a tool for reverse engineering Android APK files.Check if you run itEPSS 0.19%Apr 21, 2026
- Low2.3Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request.Check if you run itEPSS 0.17%Apr 20, 2026
- Medium6.3OpenClaw versions 2026.4.7 before 2026.4.15 fail to enforce local-root containment on tool-result media paths, allowing arbitrary local and UNC file access.Check if you run itEPSS 0.42%Apr 20, 2026
- Medium5.4Claude Code is an agentic coding tool.Check if you run itEPSS 0.15%Apr 17, 2026
- Medium6.7A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.Check if you run itEPSS 0.17%Apr 17, 2026
- Medium6.9GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly.Check if you run itEPSS 0.46%Apr 17, 2026
- High8.5The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host.Check if you run itEPSS 0.19%Apr 17, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.53%Apr 16, 2026
- High8.5Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly…Check if you run itEPSS 0.10%Apr 15, 2026
- High8.3Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to…Check if you run itEPSS 0.38%Apr 15, 2026
- High8.8Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds…Check if you run itEPSS 0.32%Apr 15, 2026
- High8.3Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentiall…Check if you run itEPSS 0.33%Apr 15, 2026
- High7.4Git for Windows is the Windows port of Git.Check if you run itEPSS 0.53%Apr 15, 2026
- High8.7Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan…Check if you run itEPSS 0.29%Apr 15, 2026