Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Out-of-bounds Read vulnerability in tildearrow furnace (extern/libsndfile-modified/src modules).Check if you run itEPSS 0.13%Mar 24, 2026
- Medium5.1A vulnerability has been found in projectworlds Lawyer Management System 1.0.Check if you run itEPSS 0.20%Mar 24, 2026
- High8.5Integer Overflow or Wraparound vulnerability in artraweditor ART (rtengine modules).Check if you run itEPSS 0.13%Mar 24, 2026
- Medium6.9A vulnerability was detected in SourceCodester Online Library Management System 1.0.Check if you run itEPSS 0.27%Mar 24, 2026
- Medium6.9A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00.Check if you run itEPSS 0.33%Mar 24, 2026
- Medium6.8Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.21%Mar 24, 2026
- High7.5Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.35%Mar 24, 2026
- Medium6.5The LearnDash LMS plugin for WordPress is vulnerable to blind time-based SQL Injection via the 'filters[orderby_order]' parameter in the 'learndash_propanel_template' AJAX action iCheck if you run itEPSS 0.28%Mar 24, 2026
- Low1.9A security flaw has been discovered in bolo-blog up to 2.6.4.Check if you run itEPSS 0.29%Mar 24, 2026
- Medium6.9A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.37%Mar 24, 2026
- High8.8Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.43%Mar 24, 2026
- High8.8Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.35%Mar 24, 2026
- High8.8Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.40%Mar 24, 2026
- High8.8Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.46%Mar 24, 2026
- High8.8Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.36%Mar 24, 2026
- High8.8Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.39%Mar 24, 2026
- High8.8Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.46%Mar 24, 2026
- High8.8Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.51%Mar 24, 2026
- High8.6Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, becauCheck if you run itEPSS 1.25%Mar 24, 2026
- Medium4.5bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm.Check if you run itEPSS 0.24%Mar 24, 2026
- Medium6.2Dasel is a command-line tool and library for querying, modifying, and transforming data structures.Check if you run itEPSS 0.22%Mar 24, 2026
- High7.8llama.cpp is an inference of several LLM models in C/C++.Check if you run itEPSS 0.51%Mar 24, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.43%Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Check if you run itEPSS 0.31%Mar 24, 2026
- Medium6.1iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file.Check if you run itEPSS 0.22%Mar 24, 2026
Sort