Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Statamic is a, Laravel + Git powered CMS designed for building websites.Check if you run itEPSS 0.32%Feb 11, 2026
- High8.5AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism.Check if you run itEPSS 0.75%Feb 11, 2026
- Medium6.9Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.27%Feb 11, 2026
- High7.0A flaw was found in BusyBox.Check if you run itEPSS 0.19%Feb 11, 2026
- High7.0A flaw was found in BusyBox.Check if you run itEPSS 0.72%Feb 11, 2026
- High7.6Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.22%Feb 11, 2026
- Medium5.5Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.44%Feb 11, 2026
- Medium4.3Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.25%Feb 11, 2026
- Medium5.4Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spCheck if you run itEPSS 0.25%Feb 11, 2026
- High8.8Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruptCheck if you run itEPSS 0.29%Feb 11, 2026
- Medium6.5Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spCheck if you run itEPSS 0.25%Feb 11, 2026
- High7.5Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to potenCheck if you run itEPSS 0.22%Feb 11, 2026
- Medium6.5Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to performCheck if you run itEPSS 0.27%Feb 11, 2026
- Medium6.5Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.24%Feb 11, 2026
- Medium6.5Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.27%Feb 11, 2026
- High8.8Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 9.09%Feb 11, 2026
- High8.8Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 4.62%Feb 11, 2026
- High8.8Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 4.51%Feb 11, 2026
- Medium6.6A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reCheck if you run itEPSS 0.57%Feb 11, 2026
- Low1.3An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuCheck if you run itEPSS 0.20%Feb 11, 2026
- High8.0PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary view based on a function containing malicious code.Check if you run itEPSS 0.33%Feb 11, 2026
- High8.0PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that oCheck if you run itEPSS 0.50%Feb 11, 2026
- Medium5.8The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability cCheck if you run itEPSS 0.22%Feb 11, 2026
- Critical9.3An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.Check if you run itEPSS 0.73%Feb 11, 2026
- Critical9.3Authentication for ZLAN5143D can be bypassed by directly accessing internal URLs.Check if you run itEPSS 0.80%Feb 11, 2026
Sort