Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Use-after-free in the CSS Parsing and Computation component.Check if you run itEPSS 0.51%Mar 24, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component.Check if you run itEPSS 0.82%Mar 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component.Check if you run itEPSS 0.71%Mar 24, 2026
- Critical10.0Sandbox escape due to use-after-free in the Disability Access APIs component.Check if you run itEPSS 0.56%Mar 24, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions in the Telemetry component.Check if you run itEPSS 0.57%Mar 24, 2026
- High7.5Incorrect boundary conditions in the Graphics: Canvas2D component.Check if you run itEPSS 0.74%Mar 24, 2026
- High7.5Incorrect boundary conditions in the Graphics: Canvas2D component.Check if you run itEPSS 0.73%Mar 24, 2026
- High7.5Race condition, use-after-free in the Graphics: WebRender component.Check if you run itEPSS 0.37%Mar 24, 2026
- Medium6.9WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files.Check if you run itEPSS 0.18%Mar 24, 2026
- High8.8Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL co…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.6X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-b…Check if you run itEPSS 0.19%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files by bypassingCheck if you run itEPSS 0.83%Mar 24, 2026
- Critical9.3Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a crafted MAIL FROMCheck if you run itEPSS 0.95%Mar 24, 2026
- Medium6.9WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application by supplying oCheck if you run itEPSS 0.24%Mar 24, 2026
- High8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through theCheck if you run itEPSS 0.36%Mar 24, 2026
- High8.8Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameCheck if you run itEPSS 0.28%Mar 24, 2026
- High8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parametCheck if you run itEPSS 0.28%Mar 24, 2026
- High8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.Check if you run itEPSS 0.35%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through tCheck if you run itEPSS 0.31%Mar 24, 2026
- High8.8Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' GET parameteCheck if you run itEPSS 0.34%Mar 24, 2026
- High8.8Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint.Check if you run itEPSS 0.34%Mar 24, 2026
- High8.6Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) oCheck if you run itEPSS 0.27%Mar 24, 2026
- High8.6AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input tCheck if you run itEPSS 0.27%Mar 24, 2026
- Medium6.9phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and filCheck if you run itEPSS 0.58%Mar 24, 2026
- High8.6AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers wCheck if you run itEPSS 0.27%Mar 24, 2026
Sort