Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.30%Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.48%Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.24%Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.40%Apr 24, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.90%Apr 23, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.53%Apr 23, 2026
- Critical9.3Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.72%Apr 23, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.73%Apr 23, 2026
- High8.0Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.57%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.08%Apr 23, 2026
- Critical9.6Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.39%Apr 23, 2026
- High8.3Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file.Check if you run itEPSS 0.22%Apr 23, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Check if you run itEPSS 0.35%Apr 22, 2026
- Critical9.8In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state…Check if you run itEPSS 0.73%Apr 22, 2026
- High7.5In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed th…Check if you run itEPSS 0.49%Apr 22, 2026
- Medium5.9Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory).Check if you run itEPSS 0.23%Apr 21, 2026
- Critical9.1Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.82%Apr 21, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Check if you run itEPSS 0.60%Apr 21, 2026
- Low2.3Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request.Check if you run itEPSS 0.17%Apr 20, 2026
- Critical9.3EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and d…Check if you run itEPSS 0.65%Apr 20, 2026
- Critical9.3EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and d…Check if you run itEPSS 0.65%Apr 20, 2026
- High8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.36%Apr 17, 2026
- Medium6.9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.29%Apr 17, 2026
- Medium4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.30%Apr 17, 2026
- Medium6.7A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.Check if you run itEPSS 0.17%Apr 17, 2026