Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.15%May 5, 2026
- High7.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.15%May 5, 2026
- High7.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.15%May 5, 2026
- High8.8Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.15%May 5, 2026
- Critical9.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.29%May 5, 2026
- High8.2Sandboxie is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.16%May 5, 2026
- High8.2ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.52%May 5, 2026
- Medium6.3OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks.Check if you run itEPSS 0.40%May 5, 2026
- High8.8A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store.Check if you run itEPSS 0.14%May 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.Check if you run itEPSS 0.32%May 4, 2026
- High8.6CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby e…Check if you run itEPSS 0.83%May 2, 2026
- High8.7CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.Check if you run itEPSS 0.55%May 2, 2026
- Medium6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Check if you run itEPSS 0.13%Apr 30, 2026
- Medium6.8CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.14%Apr 30, 2026
- Medium5.9CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.13%Apr 30, 2026
- High8.5CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.Check if you run itEPSS 0.15%Apr 30, 2026
- High7.3A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections.Check if you run itEPSS 0.33%Apr 29, 2026
- Medium6.8Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.15%Apr 29, 2026
- Medium4.3Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phi…Check if you run itEPSS 0.33%Apr 29, 2026
- High7.7Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.Check if you run itEPSS 0.99%Apr 29, 2026
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Check if you run itEPSS 0.72%Apr 29, 2026
- Medium4.3Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.26%Apr 28, 2026
- High7.3Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1Check if you run itEPSS 0.37%Apr 27, 2026
- Critical9.9Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Apr 24, 2026
- High7.5go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP.Check if you run itEPSS 1.47%Apr 24, 2026