Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.Check if you run itEPSS 0.59%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.2A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary co…Check if you run itEPSS 0.52%Feb 24, 2026
- UnknownMicrosoft Windows External Control of File Name or PathPatch nowKEVEPSS 0.84%Feb 24, 2026
- High7.4A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.19%Feb 23, 2026
- High7.4A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges.Check if you run itEPSS 0.19%Feb 23, 2026
- Critical9.4Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior.Check if you run itEPSS 0.51%Feb 21, 2026
- Medium6.3Werkzeug is a comprehensive WSGI web application library.Check if you run itEPSS 0.56%Feb 21, 2026
- Medium5.5RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability.Check if you run itEPSS 0.34%Feb 20, 2026
- High7.1ADB Explorer is a fluent UI for ADB on Windows.Check if you run itEPSS 0.23%Feb 20, 2026
- High8.2A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory.Check if you run itEPSS 0.39%Feb 20, 2026
- Critical9.3calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.87%Feb 20, 2026
- Critical10.0Sensitive data disclosure and manipulation due to missing authorization.Check if you run itEPSS 0.48%Feb 20, 2026
- Critical10.0Sensitive data disclosure and manipulation due to improper authentication.Check if you run itEPSS 0.73%Feb 20, 2026
- Critical10.0Sensitive data disclosure and manipulation due to improper authentication.Check if you run itEPSS 0.81%Feb 20, 2026
- Critical9.8Sensitive data disclosure and manipulation due to missing authentication.Check if you run itEPSS 0.73%Feb 20, 2026
- High7.8ADB Explorer is a fluent UI for ADB on Windows.Check if you run itEPSS 0.23%Feb 20, 2026
- Unknownlollms lollms_web_ui Absolute Path TraversalPatch nowKEVEPSS 1.94%Feb 20, 2026
- High7.8Microsoft Windows Improper Privilege Management VulnerabilityPatch nowKEVEPSS 4.15%Feb 10, 2026
- Medium6.2Microsoft Windows NULL Pointer Dereference VulnerabilityPatch nowKEVEPSS 4.83%Feb 10, 2026
- High7.8Microsoft Windows Type Confusion VulnerabilityPatch nowKEVEPSS 2.48%Feb 10, 2026
- High8.8Microsoft MSHTML Framework Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 15.85%Feb 10, 2026
- High8.8Microsoft Windows Shell Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 24.54%Feb 10, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.14%Feb 5, 2026