Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks.Check if you run itEPSS 0.22%Aug 19, 2025
- Medium6.1Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing forCheck if you run itEPSS 0.16%Aug 19, 2025
- Critical9.1The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme.Check if you run itEPSS 0.39%Aug 19, 2025
- Medium5.4The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked intoCheck if you run itEPSS 0.23%Aug 19, 2025
- Critical9.8Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page.Check if you run itEPSS 0.48%Aug 19, 2025
- Medium4.3A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack.Check if you run itEPSS 0.23%Aug 19, 2025
- Critical9.8Firefox for Android allowed a sandboxed iframe without the attribute to start downloads.Check if you run itEPSS 0.47%Aug 19, 2025
- Medium5.3In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin.Check if you run itEPSS 0.29%Aug 19, 2025
- High8.1Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141.Check if you run itEPSS 0.40%Aug 19, 2025
- Critical9.8Memory safety bugs present in Firefox 141 and Thunderbird 141.Check if you run itEPSS 0.49%Aug 19, 2025
- Medium6.5Spoofing issue in the Address Bar component.Check if you run itEPSS 0.27%Aug 19, 2025
- Medium6.5Spoofing issue in the Address Bar component of Firefox Focus for Android.Check if you run itEPSS 0.22%Aug 19, 2025
- High7.5Denial-of-service due to out-of-memory in the Graphics: WebRender component.Check if you run itEPSS 0.41%Aug 19, 2025
- High8.1Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141.Check if you run itEPSS 0.51%Aug 19, 2025
- Medium6.5Uninitialized memory in the JavaScript Engine component.Check if you run itEPSS 0.39%Aug 19, 2025
- High8.1Same-origin policy bypass in the Graphics: Canvas2D component.Check if you run itEPSS 0.27%Aug 19, 2025
- Critical9.8An attacker was able to perform memory corruption in the GMP process which processes encrypted media.Check if you run itEPSS 0.61%Aug 19, 2025
- Medium5.1A vulnerability has been found in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium4.8A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2.Check if you run itEPSS 0.15%Aug 19, 2025
- Medium6.5nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engineered for modern web infrastructure.Check if you run itEPSS 0.24%Aug 19, 2025
- Medium5.1A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2025.Q1.0 through 2025.Q1.15, 20Check if you run itEPSS 0.18%Aug 19, 2025
- Medium6.9A vulnerability was found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.44%Aug 19, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.43%Aug 19, 2025
- Low2.7IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorizCheck if you run itEPSS 0.25%Aug 19, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.29%Aug 19, 2025
Sort