Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.62%Nov 7, 2025
- Medium6.1A flaw was found in Red Hat Single Sign-On.Check if you run itEPSS 0.21%Nov 6, 2025
- High8.7Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-service condition, traverse directories, or read/write files, wCheck if you run itEPSS 0.56%Nov 6, 2025
- High8.7Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissiCheck if you run itEPSS 0.76%Nov 6, 2025
- High8.7Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote code execution with system-level permissiCheck if you run itEPSS 0.73%Nov 6, 2025
- High8.8Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file.Check if you run itEPSS 0.34%Nov 6, 2025
- High8.1Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.30%Nov 6, 2025
- High8.8Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memCheck if you run itEPSS 0.42%Nov 6, 2025
- High8.8Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 3.75%Nov 6, 2025
- Medium5.3Insufficient input sanitization in the dashboard label or path can allow an attacker to trigger a device error causing information disclosure or data manipulation.Check if you run itEPSS 0.24%Nov 6, 2025
- High7.1The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services.Check if you run itEPSS 0.27%Nov 6, 2025
- Low3.1Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.27%Nov 6, 2025
- Medium6.3Inappropriate implementation in Storage in Google Chrome on Mac prior to 141.0.7390.54 allowed a remote attacker to perform domain spoofing via a crafted video file.Check if you run itEPSS 0.24%Nov 6, 2025
- Medium4.3Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.26%Nov 6, 2025
- Medium6.3Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfoCheck if you run itEPSS 0.23%Nov 6, 2025
- Medium6.3Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to performCheck if you run itEPSS 0.21%Nov 6, 2025
- High7.5Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.38%Nov 6, 2025
- Medium5.4Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofCheck if you run itEPSS 0.23%Nov 6, 2025
- High8.2Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTCheck if you run itEPSS 0.26%Nov 6, 2025
- Medium6.3Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofinCheck if you run itEPSS 0.23%Nov 6, 2025
- Medium6.5Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Check if you run itEPSS 0.26%Nov 6, 2025
- High7.1Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.23%Nov 6, 2025
- High8.8Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption viaCheck if you run itEPSS 0.32%Nov 6, 2025
- Medium5.3lakeFS is an open-source tool that transforms object storage into a Git-like repositories.Check if you run itEPSS 0.29%Nov 6, 2025
- High7.5A flaw was found in the 3scale Developer Portal.Check if you run itEPSS 0.27%Nov 6, 2025
Sort