Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check this weekEPSS 35.00%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 24.00%May 22, 2025
- High7.7Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, LinuxCheck this weekEPSS 36.00%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 23.00%May 22, 2025
- Medium6.5Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting IncorrCheck this weekEPSS 39.00%May 22, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check this weekEPSS 60.00%May 21, 2025
- Medium5.7Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: beforCheck this weekEPSS 17.00%May 21, 2025
- Medium5.9Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affCheck this weekEPSS 12.00%May 21, 2025
- High8.4An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.Check this weekEPSS 18.00%May 21, 2025
- High8.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.net bunny.net bunnycdn allows Stored XSS.This issue affects bunny.net: fCheck if you run itEPSS 0.48%May 19, 2025
- High7.3Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and tCheck if you run itEPSS 0.21%May 16, 2025
- High7.8Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.84%May 15, 2025
- Low3.9Information Exposure vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: fCheck this weekEPSS 15.00%May 15, 2025
- Medium5.3Weak encryption vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 1Check this weekEPSS 16.00%May 15, 2025
- High8.7XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 beforeCheck this weekEPSS 39.00%May 15, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsCheck if you run itEPSS 0.56%May 14, 2025
- High7.1An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a localCheck this weekEPSS 16.00%May 14, 2025
- Medium6.5Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.58%May 14, 2025
- Medium6.5NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.55%May 14, 2025
- Medium6.5NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.55%May 14, 2025
- Medium6.5NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.Check if you run itEPSS 0.55%May 14, 2025
- High7.5In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of theCheck this weekEPSS 25.09%May 14, 2025
- High8.0External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 1.27%May 13, 2025
- Medium6.9Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial oCheck this weekEPSS 15.00%May 13, 2025
- Medium5.8Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enableCheck this weekEPSS 13.00%May 13, 2025