Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a craftedCheck if you run itEPSS 0.50%Mar 12, 2026
- Critical9.8Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode.Check if you run itEPSS 0.71%Mar 12, 2026
- Medium6.5Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R20Check if you run itEPSS 0.26%Mar 12, 2026
- Medium5.3A security vulnerability has been detected in whyour qinglong up to 2.20.1.Patch nowKEVEPSS 0.46%Mar 11, 2026
- Medium6.8HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication.Check if you run itEPSS 0.54%Mar 11, 2026
- Medium4.8A weakness has been identified in OpenAkita up to 1.24.3.Check if you run itEPSS 1.32%Mar 11, 2026
- Medium6.3A security flaw has been discovered in perfree go-fastdfs-web up to 1.3.7.Check if you run itEPSS 0.40%Mar 11, 2026
- Medium6.9yauzl (aka Yet Another Unzip Library) version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate() function.Check if you run itEPSS 0.57%Mar 11, 2026
- Medium5.3A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5.Check if you run itEPSS 0.41%Mar 11, 2026
- Medium4.3Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.20%Mar 11, 2026
- Medium4.3Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.19%Mar 11, 2026
- Medium5.3Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.18%Mar 11, 2026
- Medium6.5Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.Check if you run itEPSS 0.17%Mar 11, 2026
- Medium6.5Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-origin data viCheck if you run itEPSS 0.20%Mar 11, 2026
- Medium6.5Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.21%Mar 11, 2026
- High8.8Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.31%Mar 11, 2026
- Medium6.5Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.19%Mar 11, 2026
- Medium6.5Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page.Check if you run itEPSS 0.21%Mar 11, 2026
- High7.5Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.21%Mar 11, 2026
- High8.8Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.32%Mar 11, 2026
- Medium6.5Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.18%Mar 11, 2026
- Low3.7HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive informCheck if you run itEPSS 0.28%Mar 11, 2026
- Low3.1Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.19%Mar 11, 2026
- Medium4.3Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofiCheck if you run itEPSS 0.14%Mar 11, 2026
- Medium4.3Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.20%Mar 11, 2026
Sort