Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntraccar traccar Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.28%Nov 17, 2025
- Unknownprocess: command injection via argument list on WindowsCheck if you run itEPSS 6.83%Nov 14, 2025
- Medium6.6A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted p…Open the advisoryNov 13, 2025
- High7.8Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an authenticated user to conduct an escalation of…Open the advisoryNov 13, 2025
- High7.0The Datadog Agent collects events and metrics from hosts and sends them to Datadog.Open the advisoryNov 12, 2025
- Medium5.2A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use,…Open the advisoryNov 12, 2025
- High7.8Microsoft Windows Link Following VulnerabilityPatch nowKEVEPSS 4.61%Nov 11, 2025
- High7.0Microsoft Windows Race Condition VulnerabilityPatch nowKEVEPSS 4.46%Nov 11, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- UnknownMicrosoft Windows User Interface (UI) Misrepresentation of Critical InformationPatch nowKEVEPSS 73.03%Oct 30, 2025
- UnknownVanDyke Software VShell for Windows Trigger Action Script VulnerabilityPatch nowKEVEPSS 31.89%Oct 20, 2025
- UnknownPaperCut papercut_mf Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 80.06%Oct 17, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.98%Oct 14, 2025
- High7.8Microsoft Windows Improper Access Control VulnerabilityPatch nowKEVEPSS 2.66%Oct 14, 2025
- High7.8Microsoft Windows Untrusted Pointer Dereference VulnerabilityPatch nowKEVEPSS 6.37%Oct 14, 2025
- High7.8Greenshot is an open source Windows screenshot utility.Open the advisorySep 16, 2025
- Medium5.7Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command.Open the advisorySep 12, 2025
- High7.0DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing…Open the advisorySep 10, 2025
- High7.0PyInstaller bundles a Python application and all its dependencies into a single package.Open the advisorySep 9, 2025
- High7.7NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper pr…Open the advisoryAug 29, 2025
- High7.3Local privilege escalation due to improper soft link handling.Open the advisoryAug 28, 2025
- High7.8NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks.Open the advisoryAug 28, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 23.82%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 16.78%Aug 20, 2025
- UnknownMicrosoft Windows Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 16.37%Aug 20, 2025