Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check this weekEPSS 35.00%Jun 21, 2025
- Medium6.1DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check this weekEPSS 23.00%Jun 21, 2025
- Medium5.1DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check this weekEPSS 21.00%Jun 21, 2025
- High7.5Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows an unauthorized attacker to disclose information over a netCheck this weekEPSS 83.00%Jun 20, 2025
- Medium6.1A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions.Check this weekEPSS 25.00%Jun 18, 2025
- Medium4.9Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificatesOpen the advisoryJun 18, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 29.81%Jun 17, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in motov.net Ebook Store ebook-store allows Stored XSS.This issue affects Ebook SCheck this weekEPSS 20.00%Jun 17, 2025
- High8.6Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for WindowsCheck this weekEPSS 15.00%Jun 17, 2025
- High7.3Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsCheck this weekEPSS 13.00%Jun 17, 2025
- High7.8In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege.Check this weekEPSS 20.00%Jun 16, 2025
- Critical9.3A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.Check if you run itEPSS 0.32%Jun 12, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- Medium4.6A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (ACheck if you run itEPSS 0.46%Jun 12, 2025
- Medium5.5os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink.Check this weekEPSS 33.00%Jun 11, 2025
- Medium6.3The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.Check this weekEPSS 24.00%Jun 11, 2025
- Critical9.3Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 8.03%Jun 11, 2025
- Critical9.5Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key toCheck if you run itEPSS 0.34%Jun 11, 2025
- Critical9.5Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connectCheck this weekEPSS 64.00%Jun 11, 2025
- High8.1The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key.Check if you run itEPSS 0.38%Jun 10, 2025
- High8.2An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software.Check if you run itEPSS 0.43%Jun 10, 2025
- High7.8Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Jun 10, 2025
- High7.8Microsoft Office Path Traversal: '.../...//'Patch nowKEVEPSS 0.75%Jun 10, 2025
- High7.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.Check if you run itEPSS 2.39%Jun 10, 2025
- High7.8Improper input validation in Microsoft Office allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.58%Jun 10, 2025