Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution orCheck if you run itEPSS 0.63%Aug 7, 2025
- Critical9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects.Check if you run itEPSS 0.63%Aug 7, 2025
- Low3.7SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.25%Aug 7, 2025
- Medium5.3A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0.Check if you run itEPSS 0.38%Aug 7, 2025
- High8.2Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCheck if you run itEPSS 0.74%Aug 7, 2025
- Medium6.5Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCheck if you run itEPSS 0.63%Aug 7, 2025
- Critical10.0Azure OpenAI Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.12%Aug 7, 2025
- Critical9.1Azure Portal Elevation of Privilege VulnerabilityCheck if you run itEPSS 0.84%Aug 7, 2025
- Medium4.8A vulnerability was found in Open5GS up to 2.7.5.Check if you run itEPSS 0.23%Aug 7, 2025
- High7.0The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate theiCheck if you run itEPSS 0.13%Aug 7, 2025
- Medium6.4Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID.Check if you run itEPSS 0.24%Aug 7, 2025
- Medium5.3A vulnerability was found in agentUniverse up to 0.0.18 and classified as critical.Check if you run itEPSS 1.48%Aug 7, 2025
- Medium5.3Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environmeCheck if you run itEPSS 0.23%Aug 7, 2025
- Low3.7IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass security restrictions caused by a faCheck if you run itEPSS 0.47%Aug 7, 2025
- High7.0Cancelling a query (e.g.Check if you run itEPSS 0.41%Aug 7, 2025
- High8.7Cloudflare quiche was discovered to be vulnerable to an infinite loop when sending packets containing RETIRE_CONNECTION_ID frames.Check if you run itEPSS 0.45%Aug 7, 2025
- Medium6.9A vulnerability was identified in the XPC services of Fantastical.Check if you run itEPSS 0.41%Aug 7, 2025
- High8.7On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP.Check if you run itEPSS 0.50%Aug 7, 2025
- High8.8: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0Check if you run itEPSS 0.35%Aug 7, 2025
- Medium4.3Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.24%Aug 7, 2025
- Medium4.3Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTCheck if you run itEPSS 0.25%Aug 7, 2025
- Medium4.3Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-orCheck if you run itEPSS 0.29%Aug 7, 2025
- Medium4.3Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.25%Aug 7, 2025
- Medium4.3Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfoCheck if you run itEPSS 0.25%Aug 7, 2025
- High8.8Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.35%Aug 7, 2025
Sort