Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service due to concurrent execution oCheck this weekEPSS 37.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 under specific configurations could allow an authenticated user toCheck this weekEPSS 40.00%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck this weekEPSS 39.00%May 5, 2025
- High8.6Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.Check if you run itEPSS 0.32%May 5, 2025
- Critical9.8Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.54%May 5, 2025
- Medium6.3Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.28%May 5, 2025
- High8.8Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially explCheck if you run itEPSS 0.43%May 5, 2025
- High8.8Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.44%May 5, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to caCheck this weekEPSS 38.00%May 5, 2025
- Medium6.5User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.88%May 2, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.Check this weekEPSS 36.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources.Check this weekEPSS 16.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources.Check this weekEPSS 15.00%May 1, 2025
- High8.5Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.Check this weekEPSS 79.00%Apr 30, 2025
- Critical9.8Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.09%Apr 30, 2025
- High7.5Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.58%Apr 30, 2025
- Critical9.9Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.97%Apr 30, 2025
- High8.7Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.88%Apr 30, 2025
- High8.1Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.39%Apr 30, 2025
- Medium6.5Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attackerCheck if you run itEPSS 0.29%Apr 30, 2025
- High7.6A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files.Check if you run itEPSS 0.48%Apr 30, 2025
- Low3.3snowflake-connector-net is the Snowflake Connector for .NET.Check if you run itEPSS 0.17%Apr 28, 2025
- High8.8GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue.Check if you run itEPSS 0.95%Apr 28, 2025
- High8.4Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English.Check if you run itEPSS 0.21%Apr 28, 2025
- Medium4.9Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed.Check this weekEPSS 48.00%Apr 28, 2025