Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Check if you run itEPSS 0.43%Apr 1, 2026
- Medium6.3Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.36%Apr 1, 2026
- High8.8Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.56%Apr 1, 2026
- Low2.0A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.3A vulnerability was detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.27%Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.0A security flaw has been discovered in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.28%Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- High7.1Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process.Check if you run itEPSS 0.18%Apr 1, 2026
- High7.8The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable director…Check if you run itEPSS 0.13%Apr 1, 2026
- High7.8The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to…Check if you run itEPSS 0.34%Apr 1, 2026
- Medium5.5The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF.Check if you run itEPSS 0.11%Apr 1, 2026
- High7.8The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state.Check if you run itEPSS 0.12%Apr 1, 2026
- Medium5.5The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources.Check if you run itEPSS 0.11%Apr 1, 2026
- High7.8The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged use…Check if you run itEPSS 0.26%Apr 1, 2026
- High7.5The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) imm…Check if you run itEPSS 0.11%Apr 1, 2026
- Medium5.1A vulnerability was found in gougucms 4.08.18.Check if you run itEPSS 0.20%Apr 1, 2026
- Medium4.3The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the entries_shortcoCheck if you run itEPSS 0.24%Apr 1, 2026
- Low2.1A vulnerability has been found in gougucms 4.08.18.Check if you run itEPSS 0.25%Apr 1, 2026
- High8.7XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions.Check if you run itEPSS 0.35%Apr 1, 2026
- Medium6.9XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems.Check if you run itEPSS 0.12%Apr 1, 2026
- Critical9.3XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts.Check if you run itEPSS 0.46%Apr 1, 2026
- High8.7XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes.Check if you run itEPSS 0.27%Apr 1, 2026
- High8.8IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium5.3XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL.Check if you run itEPSS 0.15%Apr 1, 2026
Sort