Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Aug 11, 2026
- Medium6.7Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Aug 11, 2026
- High7.8ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.33%Aug 11, 2026
- Critical9.4Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.83%Aug 11, 2026
- Medium5.3A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding.Check if you run itEPSS 1.03%Aug 11, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 90.49%Aug 11, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 8.19%Aug 11, 2026
- High7.1A flaw was found in MRTG.Check if you run itEPSS 0.13%Aug 11, 2026
- High7.5A flaw was found in Wildfly.Check if you run itEPSS 1.01%Aug 11, 2026
- High7.5A flaw was found in Undertow.Check if you run itEPSS 1.16%Aug 11, 2026
- High7.4A flaw was found in EAP's IIOP.Check if you run itEPSS 0.66%Aug 11, 2026
- High7.5A flaw was found in EAP's jboss-remoting.Check if you run itEPSS 1.01%Aug 11, 2026
- High7.5A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder.Check if you run itEPSS 0.85%Aug 11, 2026
- High8.1when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated a…Check if you run itEPSS 0.77%Aug 11, 2026
- High8.1A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forg…Check if you run itEPSS 0.33%Aug 11, 2026
- High8.8A flaw was found in JBoss marshalling.Check if you run itEPSS 0.95%Aug 11, 2026
- High7.4the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication.Check if you run itEPSS 0.57%Aug 11, 2026
- Critical9.8A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauth…Check if you run itEPSS 0.46%Aug 11, 2026
- Medium6.5A flaw was found in wildfly-core.Check if you run itEPSS 0.52%Aug 11, 2026
- High7.3Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Co…Check if you run itEPSS 0.32%Aug 11, 2026
- High7.6SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input.Check if you run itEPSS 0.40%Aug 11, 2026
- Low3.7SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enab…Check if you run itEPSS 0.19%Aug 11, 2026
- Critical9.1SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which…Check if you run itEPSS 0.77%Aug 11, 2026
- Medium5.3SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands.Check if you run itEPSS 0.47%Aug 11, 2026
- Critical9.8SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption.Check if you run itEPSS 0.64%Aug 11, 2026
Sort