Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Same-origin policy bypass in the DOM: Workers component.Check if you run itEPSS 0.27%Nov 11, 2025
- High8.1Mitigation bypass in the DOM: Security component.Check if you run itEPSS 0.27%Nov 11, 2025
- High8.1Same-origin policy bypass in the DOM: Notifications component.Check if you run itEPSS 0.27%Nov 11, 2025
- Critical9.8Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component.Check if you run itEPSS 0.38%Nov 11, 2025
- High7.5Incorrect boundary conditions in the Graphics: WebGPU component.Check if you run itEPSS 0.30%Nov 11, 2025
- Critical9.8JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.38%Nov 11, 2025
- High7.5Incorrect boundary conditions in the JavaScript: WebAssembly component.Check if you run itEPSS 0.41%Nov 11, 2025
- Critical9.8Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component.Check if you run itEPSS 0.38%Nov 11, 2025
- Critical9.8Incorrect boundary conditions in the Graphics: WebGPU component.Check if you run itEPSS 0.38%Nov 11, 2025
- Critical9.8Incorrect boundary conditions in the Graphics: WebGPU component.Check if you run itEPSS 0.38%Nov 11, 2025
- Low3.4Spoofing issue in Firefox.Check if you run itEPSS 0.23%Nov 11, 2025
- High8.8Use-after-free in the Audio/Video component.Check if you run itEPSS 0.32%Nov 11, 2025
- Medium6.1Mitigation bypass in the DOM: Core & HTML component.Check if you run itEPSS 0.22%Nov 11, 2025
- High7.5Race condition in the Graphics component.Check if you run itEPSS 0.24%Nov 11, 2025
- High8.2System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.Check if you run itEPSS 0.12%Nov 11, 2025
- High7.1Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on diskCheck if you run itEPSS 0.24%Nov 11, 2025
- Low2.7In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limitCheck if you run itEPSS 0.23%Nov 11, 2025
- High8.1Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc.Check if you run itEPSS 0.30%Nov 11, 2025
- High8.9A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API.Check if you run itEPSS 0.15%Nov 11, 2025
- High8.9A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API.Check if you run itEPSS 0.18%Nov 11, 2025
- Medium5.9Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual servCheck this weekEPSS 26.25%Nov 11, 2025
- High8.4A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.Check if you run itEPSS 0.34%Nov 11, 2025
- High8.6A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS.Check if you run itEPSS 0.37%Nov 11, 2025
- Medium6.5Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor.Check if you run itEPSS 0.45%Nov 11, 2025
- High7.6A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password.Check if you run itEPSS 0.16%Nov 11, 2025
Sort