Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Other issue in the WebRTC component.Check if you run itEPSS 0.45%May 7, 2026
- High8.1Memory safety bugs present in Firefox 150.0.1.Check if you run itEPSS 0.32%May 7, 2026
- High8.1Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1.Check if you run itEPSS 0.41%May 7, 2026
- Critical9.8Incorrect boundary conditions in the Audio/Video: Playback component.Check if you run itEPSS 0.47%May 7, 2026
- High7.3Use-after-free in the DOM: Networking component.Check if you run itEPSS 0.32%May 7, 2026
- High8.8Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.33%May 7, 2026
- Medium6.5Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.15%May 7, 2026
- High8.8Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.33%May 7, 2026
- Medium6.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS.Check if you run itEPSS 0.14%May 7, 2026
- Critical9.8Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.22%May 7, 2026
- High7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.Check if you run itEPSS 0.42%May 7, 2026
- High8.3monetr is a budgeting application for recurring expenses.Check if you run itEPSS 0.33%May 7, 2026
- High7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.Check if you run itEPSS 0.54%May 7, 2026
- High7.5GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language.Check if you run itEPSS 0.50%May 7, 2026
- High8.8Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gosoft Software Industry and Trade Ltd.Check if you run itEPSS 0.34%May 7, 2026
- Critical9.8Gnutls: gnutls: authentication bypass via nul character in usernameCheck if you run itEPSS 1.05%May 7, 2026
- High8.2Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker contai…Check if you run itEPSS 0.18%May 7, 2026
- High7.0Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container vi…Check if you run itEPSS 0.18%May 7, 2026
- Critical9.2Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via S…Check if you run itEPSS 0.23%May 7, 2026
- High8.7An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user t…Check if you run itEPSS 0.14%May 7, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.Check if you run itEPSS 0.10%May 7, 2026
- Medium6.9Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline br…Check if you run itEPSS 0.23%May 7, 2026
- High7.5A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.Check if you run itEPSS 0.27%May 7, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS.Check if you run itEPSS 0.18%May 7, 2026
- Medium5.3Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.18%May 7, 2026
Sort