Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.2Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check this weekEPSS 23.00%Jun 26, 2025
- Medium5.5File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.Check this weekEPSS 22.00%Jun 26, 2025
- Medium5.0An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut downCheck this weekEPSS 26.00%Jun 26, 2025
- High8.7A potential security vulnerability has been identified in HPE OneView for VMware vCenter (OV4VC).Check if you run itEPSS 0.30%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.43%Jun 26, 2025
- High7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.Check this weekEPSS 29.00%Jun 25, 2025
- High7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.Check this weekEPSS 29.00%Jun 25, 2025
- High7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.Check this weekEPSS 29.00%Jun 25, 2025
- Low3.3PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability.Check this weekEPSS 26.00%Jun 25, 2025
- High7.8PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability.Check this weekEPSS 29.00%Jun 25, 2025
- Medium4.6Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability.Check this weekEPSS 26.00%Jun 25, 2025
- High8.1ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.14%Jun 25, 2025
- Medium6.9OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.Check this weekEPSS 40.00%Jun 25, 2025
- Critical10.0Cisco Identity Services Engine Improper Privilege ManagementPatch nowKEVEPSS 38.72%Jun 25, 2025
- Low3.1Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator.Check this weekEPSS 27.00%Jun 25, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 97.60%Jun 25, 2025
- Medium5.0NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole.Check if you run itEPSS 0.23%Jun 24, 2025
- High8.1Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote cCheck this weekEPSS 56.00%Jun 24, 2025
- Critical9.3minidvblinux minidvblinux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.55%Jun 20, 2025
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 4.74%Jun 19, 2025
- High7.2A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.Check this weekEPSS 19.07%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tty: vt: initialize unicode screen buffer syzbot reports kernel infoleak at vcs_read() [1], for buffer can be reCheck if you run itEPSS 0.23%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries to clear the buffer with the silenCheck if you run itEPSS 0.15%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix race condition in unaccepted memory handling The page allocator tracks the number of zones thCheck if you run itEPSS 0.14%Jun 18, 2025
- Critical9.8An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations.Check if you run itEPSS 2.06%Jun 17, 2025