Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.43%May 13, 2025
- High8.8Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.09%May 13, 2025
- Medium6.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.53%May 13, 2025
- Medium6.5Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.53%May 13, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025
- Medium4.3SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials.Check if you run itEPSS 0.18%May 13, 2025
- High7.8Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free VulnerabilityPatch nowKEVEPSS 1.82%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 1.42%May 13, 2025
- High7.8Microsoft Windows DWM Core Library Use-After-Free VulnerabilityPatch nowKEVEPSS 1.92%May 13, 2025
- High7.5Microsoft Windows Scripting Engine Type Confusion VulnerabilityPatch nowKEVEPSS 27.04%May 13, 2025
- High7.3A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows.Check if you run itEPSS 0.34%May 11, 2025
- High7.3A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows.Check if you run itEPSS 0.35%May 10, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers toCheck this weekEPSS 22.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privCheck this weekEPSS 17.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and eCheck this weekEPSS 17.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrarCheck this weekEPSS 22.00%May 9, 2025
- High7.8Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletiCheck this weekEPSS 23.00%May 9, 2025
- High7.8Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to eCheck this weekEPSS 17.00%May 9, 2025
- Low1.1Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform.Check if you run itEPSS 0.56%May 6, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution oCheck this weekEPSS 37.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user toCheck this weekEPSS 40.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck this weekEPSS 39.00%May 5, 2025
- High8.6Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.Check if you run itEPSS 0.32%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to caCheck this weekEPSS 38.00%May 5, 2025