Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliCheck if you run itEPSS 0.26%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.19%Oct 13, 2026
- High7.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.17%Oct 13, 2026
- High8.8ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.82%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.52%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.14%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.20%Oct 13, 2026
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.32%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…Check if you run itEPSS 0.63%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.19%Oct 13, 2026
- High7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.Check if you run itEPSS 0.68%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 1.04%Oct 13, 2026
- High8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.13%Oct 13, 2026
- Critical9.3A flaw has been found in Colorful iGameCenter 2.0.0.82.Check if you run itEPSS 0.11%Oct 13, 2026
- Medium6.9A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0.Check if you run itEPSS 0.72%Oct 13, 2026
- High7.1AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access.Check if you run itEPSS 0.11%Oct 13, 2026
- High8.2AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.81732E ArmorBlock® - Multiple VulnerabilitiesCheck if you run itEPSS 0.27%Oct 13, 2026
- High8.3AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium4.3obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fieldsCheck if you run itEPSS 0.20%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.91%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.91%Oct 13, 2026
- High8.1Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing…Check if you run itEPSS 0.50%Oct 13, 2026
- Medium6.8Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.Check if you run itEPSS 0.53%Oct 13, 2026
- Medium6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.97%Oct 13, 2026
Sort