Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.81%May 7, 2026
- Medium6.5Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.86%May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose inform…Check if you run itEPSS 1.03%May 7, 2026
- Critical9.9Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.78%May 7, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.55%May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.03%May 7, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.03%May 7, 2026
- Medium5.3ParquetSharp is a .NET library for reading and writing Apache Parquet files.Check if you run itEPSS 0.45%May 7, 2026
- High7.5The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).Check if you run itEPSS 0.62%May 7, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.Check if you run itEPSS 0.14%May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.Check if you run itEPSS 0.43%May 6, 2026
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.Check if you run itEPSS 0.38%May 6, 2026
- Medium5.3OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry.Check if you run itEPSS 0.40%May 6, 2026
- High8.8Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.31%May 6, 2026
- High7.5Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file.Check if you run itEPSS 0.18%May 6, 2026
- High8.8Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.46%May 6, 2026
- High7.8Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.Check if you run itEPSS 0.10%May 6, 2026
- High8.8Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.22%May 6, 2026
- High8.4An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths.Check if you run itEPSS 0.11%May 6, 2026
- High8.5Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files.Check if you run itEPSS 0.18%May 6, 2026
- High8.5Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.Check if you run itEPSS 0.16%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.35%May 6, 2026
- High7.1Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers.Check if you run itEPSS 0.35%May 6, 2026
- Medium5.4Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.11%May 5, 2026
- Low2.0Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.14%May 5, 2026