Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to eCheck this weekEPSS 17.00%May 9, 2025
- Low1.1Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform.Check if you run itEPSS 0.56%May 6, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution oCheck this weekEPSS 37.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user toCheck this weekEPSS 40.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck this weekEPSS 39.00%May 5, 2025
- High8.6Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.Check if you run itEPSS 0.32%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to caCheck this weekEPSS 38.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.Check this weekEPSS 36.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources.Check this weekEPSS 16.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources.Check this weekEPSS 15.00%May 1, 2025
- Medium6.5Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attackerCheck if you run itEPSS 0.29%Apr 30, 2025
- High7.6A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files.Check if you run itEPSS 0.48%Apr 30, 2025
- Medium5.7Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execCheck if you run itEPSS 0.44%Apr 29, 2025
- High8.4Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English.Check if you run itEPSS 0.21%Apr 28, 2025
- Medium6.9Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints.Check if you run itEPSS 0.48%Apr 27, 2025
- Critical9.2Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal').Check this weekEPSS 86.00%Apr 27, 2025
- Critical9.2YoutubeDLSharp is a wrapper for the command-line video downloaders youtube-dl and yt-dlp.Check if you run itEPSS 0.26%Apr 24, 2025
- Medium5.5Denial of service due to allocation of resources without limits.Check if you run itEPSS 0.21%Apr 24, 2025
- Medium6.7Local privilege escalation due to insecure folder permissions.Check if you run itEPSS 0.17%Apr 24, 2025
- Low2.5NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in aCheck this weekEPSS 17.00%Apr 22, 2025
- High7.3A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input pathCheck this weekEPSS 62.00%Apr 22, 2025
- Medium5.9User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potenCheck this weekEPSS 33.00%Apr 21, 2025
- Medium5.6Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.Check this weekEPSS 39.00%Apr 21, 2025
- Medium5.5Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.ThCheck this weekEPSS 29.00%Apr 21, 2025
- High8.1The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM.Check if you run itEPSS 0.14%Apr 21, 2025