Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Microsoft web_deploy_4.0 Deserialization of Untrusted DataPatch nowKEVEPSS 27.75%Aug 12, 2025
- High8.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.71%Aug 12, 2025
- High7.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check this weekEPSS 52.00%Aug 12, 2025
- High7.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Check this weekEPSS 52.00%Aug 12, 2025
- High7.8Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.Check this weekEPSS 30.00%Aug 12, 2025
- Medium4.5SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths.Check this weekEPSS 32.00%Aug 12, 2025
- High8.6Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG prior to 2503 running on UAG allows routing of network trafCheck this weekEPSS 30.00%Aug 11, 2025
- High8.4RARLAB WinRAR Path Traversal VulnerabilityPatch nowKEVEPSS 94.51%Aug 8, 2025
- High8.2Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCheck this weekEPSS 71.00%Aug 7, 2025
- Medium6.5Microsoft 365 Copilot BizChat Information Disclosure VulnerabilityCheck this weekEPSS 61.00%Aug 7, 2025
- Critical10.0Azure OpenAI Elevation of Privilege VulnerabilityCheck if you run itEPSS 1.12%Aug 7, 2025
- Critical9.1Azure Portal Elevation of Privilege VulnerabilityCheck this weekEPSS 82.00%Aug 7, 2025
- High7.0The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate theiCheck this weekEPSS 12.00%Aug 7, 2025
- Medium5.3Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating system commands within the remote Microsoft Windows environmeCheck this weekEPSS 22.00%Aug 7, 2025
- High7.1Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check this weekEPSS 22.00%Aug 7, 2025
- High8.0On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix.Check if you run itEPSS 7.71%Aug 6, 2025
- Medium5.9Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.Check this weekEPSS 20.00%Aug 6, 2025
- UnknownMicrosoft Windows Improper Input ValidationPatch nowKEVEPSS 5.97%Aug 4, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- High8.7A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system.Check if you run itEPSS 2.07%Jul 23, 2025
- High7.5An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.Check this weekEPSS 14.34%Jul 18, 2025
- UnknownMicrosoft SharePoint Improper AuthenticationPatch nowKEVEPSS 99.86%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- Critical9.3A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configurCheck if you run itEPSS 1.93%Jul 15, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025