Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to execute code locally.Check if you run itEPSS 2.06%Jul 8, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.20%Jul 8, 2025
- High7.3Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.Check if you run itEPSS 0.56%Jul 8, 2025
- High7.8Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.43%Jul 8, 2025
- High7.2Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.42%Jul 8, 2025
- High7.8Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%Jul 8, 2025
- High8.8Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.92%Jul 8, 2025
- Medium5.5Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service.Check if you run itEPSS 0.25%Jul 8, 2025
- High8.2A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization.Check if you run itEPSS 1.68%Jul 8, 2025
- High7.2OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve rCheck this weekEPSS 23.02%Jul 8, 2025
- Medium4.3IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that could be usCheck if you run itEPSS 0.26%Jul 8, 2025
- Medium5.4IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-Check if you run itEPSS 0.20%Jul 8, 2025
- Medium6.4IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to storedCheck if you run itEPSS 0.20%Jul 8, 2025
- Medium4.9An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy vCheck if you run itEPSS 0.40%Jul 8, 2025
- High7.0Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.71%Jul 8, 2025
- High7.5A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c).Check if you run itEPSS 1.34%Jul 8, 2025
- High8.0Git Link Following VulnerabilityPatch nowKEVEPSS 4.38%Jul 8, 2025
- Critical9.3SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter.Check if you run itEPSS 0.48%Jul 8, 2025
- Medium6.0A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions < V11.0), SICheck if you run itEPSS 0.32%Jul 8, 2025
- Medium5.3A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (AllCheck if you run itEPSS 0.33%Jul 8, 2025
- Medium6.2Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.Check if you run itEPSS 0.14%Jul 8, 2025
- Medium4.1Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.Check if you run itEPSS 0.18%Jul 8, 2025
- Medium5.5Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.Check if you run itEPSS 0.14%Jul 8, 2025
- Medium6.2Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch.Check if you run itEPSS 0.14%Jul 8, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityPatch nowKEVEPSS 99.06%Jul 8, 2025
Sort