Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.25%Apr 15, 2026
- High8.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.72%Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.06%Apr 15, 2026
- High8.5Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive fiCheck if you run itEPSS 0.11%Apr 15, 2026
- Critical9.4Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.52%Apr 15, 2026
- Low3.1Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.45%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.31%Apr 15, 2026
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.23%Apr 15, 2026
- Medium6.1Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Check if you run itEPSS 0.20%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.53%Apr 15, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Check if you run itEPSS 0.40%Apr 15, 2026
- Medium5.3The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endCheck if you run itEPSS 0.43%Apr 15, 2026
- Medium6.1Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.5A flaw was found in FFmpeg.Check if you run itEPSS 0.45%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.34%Apr 15, 2026
- Medium6.8Weblate is a web based localization tool.Check if you run itEPSS 0.34%Apr 15, 2026
- Critical9.1Pyroscope is an open-source continuous profiling database.Check if you run itEPSS 0.41%Apr 15, 2026
- Low3.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.38%Apr 15, 2026
- High7.8A flaw was found in gimp.Check if you run itEPSS 0.27%Apr 15, 2026
- Medium6.5Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.Check if you run itEPSS 0.26%Apr 15, 2026
- High7.5Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitraryCheck if you run itEPSS 0.30%Apr 15, 2026
- High8.8Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.35%Apr 15, 2026
- High8.8Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.29%Apr 15, 2026
- Medium4.3Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file.Check if you run itEPSS 0.23%Apr 15, 2026
Sort