Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-o…Check if you run itEPSS 0.26%Mar 11, 2026
- Medium6.5Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page.Check if you run itEPSS 0.30%Mar 11, 2026
- High7.5Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.30%Mar 11, 2026
- Critical9.9Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.Check if you run itEPSS 0.86%Mar 11, 2026
- High7.1OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.50%Mar 11, 2026
- Critical9.9Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL.Check if you run itEPSS 0.49%Mar 11, 2026
- Critical9.8Taskosaur is an open source project management platform with conversational AI for task execution in-app.Check if you run itEPSS 0.70%Mar 11, 2026
- Medium5.5Dell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper Access Control vulnerability.Check if you run itEPSS 0.08%Mar 11, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.49%Mar 11, 2026
- Medium4.2A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level to perform sensitive actions intended only for hig…Check if you run itEPSS 0.33%Mar 11, 2026
- High8.8In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result…Check if you run itEPSS 0.13%Mar 11, 2026
- Medium6.5Open Forms allows users create and publish smart forms.Check if you run itEPSS 0.35%Mar 11, 2026
- High7.2Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.48%Mar 10, 2026
- Medium5.3Unicorn adds modern reactive component functionality to your Django templates.Check if you run itEPSS 0.34%Mar 10, 2026
- Critical10.0Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.54%Mar 10, 2026
- High7.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.42%Mar 10, 2026
- Medium4.0The register protection of the PowerVR GPU is incorrectly configured.Check if you run itEPSS 0.08%Mar 10, 2026
- Medium5.3An authentication bypass vulnerability exists in Vaadin 14.0.0 through 14.14.0, 23.0.0 through 23.6.6, 24.0.0 through 24.9.7 and 25.0.0 through 25.0.1, applications us…Check if you run itEPSS 0.48%Mar 10, 2026
- High7.8Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.39%Mar 10, 2026
- High7.8Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%Mar 10, 2026
- High7.8Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- Medium6.7An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifica…Check if you run itEPSS 0.15%Mar 10, 2026
- High8.8Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.Patch nowKEVEPSS 2.08%Mar 10, 2026
- High7.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.36%Mar 10, 2026
- High7.5FreshRSS is a free, self-hostable RSS aggregator.Check if you run itEPSS 0.39%Mar 9, 2026