Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 24.00%May 22, 2025
- High7.8Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.Check this weekEPSS 23.00%May 22, 2025
- High7.2Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.56%May 22, 2025
- High7.5Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 1.71%May 22, 2025
- High8.6The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary pathsCheck if you run itEPSS 0.61%May 21, 2025
- Critical10.0The embedded web server lacks authentication and access controls, allowing unrestricted remote access.Check if you run itEPSS 1.24%May 21, 2025
- Medium6.5A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remCheck if you run itEPSS 0.63%May 21, 2025
- Medium5.1A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affeCheck if you run itEPSS 0.14%May 21, 2025
- High7.7The and files reveal hard-coded password hashes for the operating system "root" user.Check if you run itEPSS 0.23%May 21, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introduced to fix the danglinCheck this weekEPSS 22.05%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: book3s64/radix : Align section vmemmap start address to PAGE_SIZE A vmemmap altmap is a device-provided region uCheck if you run itEPSS 0.21%May 20, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path Move rx_lock from xsk_socket to xsk_buff_pool.Check if you run itEPSS 0.16%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sysfs store/get operationsCheck if you run itEPSS 0.20%May 20, 2025
- Low3.7A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software.Check if you run itEPSS 0.70%May 19, 2025
- Medium6.0ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering.Check if you run itEPSS 0.11%May 19, 2025
- High7.5The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.Check if you run itEPSS 0.82%May 19, 2025
- High8.5IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability.Check if you run itEPSS 0.45%May 17, 2025
- Medium6.6net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system.Check if you run itEPSS 0.20%May 14, 2025
- Medium6.5A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating sysCheck if you run itEPSS 0.53%May 14, 2025
- Medium5.4SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.Check if you run itEPSS 0.17%May 14, 2025
- High7.5Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems (OS).Check if you run itEPSS 0.30%May 13, 2025
- High7.1A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versionsCheck if you run itEPSS 0.25%May 13, 2025
- Medium5.3A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).Check if you run itEPSS 0.22%May 13, 2025
- High7.1A vulnerability has been identified in MS/TP Point Pickup Module (All versions).Check if you run itEPSS 0.27%May 13, 2025
- High8.7A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions).Check if you run itEPSS 0.30%May 13, 2025