Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons forCheck if you run itEPSS 1.14%Aug 12, 2025
- High7.5A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti NeuronsCheck if you run itEPSS 1.12%Aug 12, 2025
- High8.1Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.Check if you run itEPSS 0.41%Aug 12, 2025
- Medium6.5Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accountsCheck if you run itEPSS 0.83%Aug 12, 2025
- High7.2Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code executionCheck if you run itEPSS 1.26%Aug 12, 2025
- High7.2SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries.Check if you run itEPSS 1.13%Aug 12, 2025
- Medium6.3EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means.Check if you run itEPSS 0.21%Aug 12, 2025
- High7.3APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access.Check if you run itEPSS 0.09%Aug 12, 2025
- Medium4.2AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing.Check if you run itEPSS 0.13%Aug 12, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Check if you run itEPSS 0.22%Aug 12, 2025
- High7.5A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions).Check if you run itEPSS 0.12%Aug 12, 2025
- High7.5A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.15%Aug 12, 2025
- High7.0A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.14%Aug 12, 2025
- High8.8A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.13%Aug 12, 2025
- Medium6.8A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0).Check if you run itEPSS 0.18%Aug 12, 2025
- High7.3A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002).Check if you run itEPSS 0.15%Aug 12, 2025
- High7.3A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002).Check if you run itEPSS 0.16%Aug 12, 2025
- High8.6A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All veCheck if you run itEPSS 0.24%Aug 12, 2025
- High8.5A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Update 9), SIMATIC STEP 7 V18 (All versions < V18 Update 6), SIMCheck if you run itEPSS 0.18%Aug 12, 2025
- Medium6.8A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 = V2.60 = V2.60 = V2.60 = V2.70 < V2.80).Check if you run itEPSS 0.10%Aug 12, 2025
- Medium6.8A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions >= V2.60 = V2.60 = V2.60 = V2.60 = V2.70 < V2.80).Check if you run itEPSS 0.10%Aug 12, 2025
- Medium4.8A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3).Check if you run itEPSS 0.12%Aug 12, 2025
- Critical9.4A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2).Check if you run itEPSS 0.67%Aug 12, 2025
- High8.7A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versions < V5.25 SP1), SINUMERIK 840D sl (All versions < V4.95 SP5Check if you run itEPSS 0.24%Aug 12, 2025
- High8.5The affected setup component is vulnerable to DLL hijacking.Check if you run itEPSS 0.21%Aug 12, 2025
Sort