Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.35%Dec 3, 2025
- Medium4.9ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.17%Dec 2, 2025
- Medium5.3Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSession which blocks the backing event loop and unconditCheck if you run itEPSS 0.31%Dec 2, 2025
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 0.46%Dec 2, 2025
- High8.7NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.Check if you run itEPSS 0.45%Dec 2, 2025
- High8.4NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords.Check if you run itEPSS 0.13%Dec 2, 2025
- High8.7NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database.Check if you run itEPSS 0.34%Dec 2, 2025
- High8.6NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are exposed in the Windows share accessed by clients in networked instCheck if you run itEPSS 0.25%Dec 2, 2025
- High7.1NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on clientCheck if you run itEPSS 0.12%Dec 2, 2025
- Critical9.3A vulnerability in Longwatch devices allows unauthenticated HTTP GET requests to execute arbitrary code via an exposed endpoint, due to the absence of code signing and execution coCheck if you run itEPSS 0.68%Dec 2, 2025
- Critical9.3The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critiCheck if you run itEPSS 0.58%Dec 2, 2025
- Critical9.8The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.40%Dec 2, 2025
- High8.8Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruptCheck if you run itEPSS 0.50%Dec 2, 2025
- High7.5Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Dec 2, 2025
- High8.8Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HCheck if you run itEPSS 0.33%Dec 2, 2025
- Low3.5Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via physical access to the device.Check if you run itEPSS 0.18%Dec 2, 2025
- High8.1Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Check if you run itEPSS 0.31%Dec 2, 2025
- High8.8Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.32%Dec 2, 2025
- Medium4.3Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass downloaCheck if you run itEPSS 0.25%Dec 2, 2025
- Medium4.3Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spCheck if you run itEPSS 0.24%Dec 2, 2025
- Medium4.4Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.18%Dec 2, 2025
- Medium4.4Inappropriate implementation in Downloads in Google Chrome on Windows prior to 143.0.7499.41 allowed a local attacker to bypass mark of the web via a crafted HTML page.Check if you run itEPSS 0.17%Dec 2, 2025
- Medium5.4Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform aCheck if you run itEPSS 0.24%Dec 2, 2025
- High8.8Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file.Check if you run itEPSS 0.42%Dec 2, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.46%Dec 2, 2025
Sort