Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Incorrect boundary conditions, integer overflow in the Audio/Video component.Check if you run itEPSS 0.43%May 19, 2026
- Critical9.6Sandbox escape due to use-after-free in the Disability Access APIs component.Check if you run itEPSS 0.53%May 19, 2026
- High8.8Privilege escalation in the Application Update component.Check if you run itEPSS 0.37%May 19, 2026
- Medium6.5Spoofing issue in the Toolbar component in Firefox for Android.Check if you run itEPSS 0.25%May 19, 2026
- Critical9.3Same-origin policy bypass in the Networking: HTTP component.Check if you run itEPSS 0.19%May 19, 2026
- High7.5Integer overflow in the Widget: Win32 component.Check if you run itEPSS 0.58%May 19, 2026
- Critical9.1Same-origin policy bypass in the DOM: Networking component.Check if you run itEPSS 0.42%May 19, 2026
- High7.3Use-after-free in the DOM: Bindings (WebIDL) component.Check if you run itEPSS 0.41%May 19, 2026
- High7.5Incorrect boundary conditions in the Audio/Video: Web Codecs component.Check if you run itEPSS 0.56%May 19, 2026
- High7.5Sandbox escape in Firefox and Firefox Focus for Android.Check if you run itEPSS 0.37%May 19, 2026
- Critical9.8Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy…Check this weekEPSS 19.56%May 19, 2026
- Critical9.5HestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js…Check if you run itEPSS 1.07%May 19, 2026
- High7.1Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially crafted SQL query.Check if you run itEPSS 0.68%May 19, 2026
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.72%May 19, 2026
- High8.7Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role.Check if you run itEPSS 0.40%May 19, 2026
- Critical9.3Sparx Pro Cloud Server requires authentication based on requested URL.Check if you run itEPSS 0.94%May 19, 2026
- High8.7Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database.Check if you run itEPSS 0.60%May 19, 2026
- High7.8The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change fro…Check if you run itEPSS 0.12%May 19, 2026
- Medium6.5Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering.Check if you run itEPSS 0.16%May 19, 2026
- Medium5.1A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- Medium5.1An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter.Check if you run itEPSS 0.20%May 19, 2026
- Low1.8An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue C…Check if you run itEPSS 0.09%May 19, 2026
Sort