Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical10.0A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform proper TLS clieCheck if you run itEPSS 0.39%Apr 1, 2026
- Medium5.5A vulnerability was found in Sanster IOPaint 1.5.3.Check if you run itEPSS 0.64%Apr 1, 2026
- High7.5A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved t…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.5A vulnerability has been found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.34%Apr 1, 2026
- Medium5.5A flaw has been found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.34%Apr 1, 2026
- Medium5.3The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number.Check if you run itEPSS 0.31%Apr 1, 2026
- Critical9.1The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, en…Check if you run itEPSS 0.24%Apr 1, 2026
- High8.8Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.32%Apr 1, 2026
- Medium6.5Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memor…Check if you run itEPSS 0.25%Apr 1, 2026
- Critical9.6Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…Check if you run itEPSS 0.32%Apr 1, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.35%Apr 1, 2026
- Critical9.6Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.32%Apr 1, 2026
- High8.8Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.Check if you run itEPSS 0.51%Apr 1, 2026
- High8.8Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.39%Apr 1, 2026
- High8.8Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.40%Apr 1, 2026
- High7.5Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a craf…Check if you run itEPSS 0.35%Apr 1, 2026
- Medium6.5Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.27%Apr 1, 2026
- High8.1Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.25%Apr 1, 2026
- High8.8Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.39%Apr 1, 2026
- High8.8Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.43%Apr 1, 2026
- High8.8Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.41%Apr 1, 2026
- High7.5Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of b…Check if you run itEPSS 0.33%Apr 1, 2026
- Medium6.5Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process m…Check if you run itEPSS 0.25%Apr 1, 2026
- High8.8Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.45%Apr 1, 2026
Sort