Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTCheck if you run itEPSS 0.25%Aug 7, 2025
- Medium4.3Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-orCheck if you run itEPSS 0.29%Aug 7, 2025
- Medium4.3Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.25%Aug 7, 2025
- Medium4.3Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfoCheck if you run itEPSS 0.25%Aug 7, 2025
- High8.8Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.35%Aug 7, 2025
- Medium4.3Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfoCheck if you run itEPSS 0.25%Aug 7, 2025
- High8.8Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.Check if you run itEPSS 0.33%Aug 7, 2025
- High8.7: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free UploadCheck if you run itEPSS 0.46%Aug 7, 2025
- High7.0EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access.Check if you run itEPSS 0.16%Aug 7, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryAug 7, 2025
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryAug 7, 2025
- High8.6SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.23%Aug 7, 2025
- Medium5.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.23%Aug 7, 2025
- Low2.5tmp is a temporary file and directory creator for node.js.Check if you run itEPSS 0.38%Aug 7, 2025
- Low2.3Let's Encrypt client and ACME library written in Go (Lego).Check if you run itEPSS 0.24%Aug 7, 2025
- Medium6.9Thinbus Javascript Secure Remote Password is a browser SRP6a implementation for zero-knowledge password authentication.Check if you run itEPSS 0.41%Aug 7, 2025
- High7.1Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.23%Aug 7, 2025
- High7.4LinkJoin through 882f196 mishandles token ownership in password reset.Check if you run itEPSS 0.34%Aug 7, 2025
- High7.4LinkJoin through 882f196 mishandles lacks type checking in password reset.Check if you run itEPSS 0.36%Aug 7, 2025
- Medium5.7ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used.Check if you run itEPSS 0.16%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js.Check if you run itEPSS 0.27%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js.Check if you run itEPSS 0.27%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.Check if you run itEPSS 0.27%Aug 7, 2025
- UnknownCVE-2025-54574 is named in an emergency Cloudflare managed-rules release.Check this weekEPSS 23.96%Aug 7, 2025
- Medium4.3Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users.Check if you run itEPSS 0.28%Aug 7, 2025
Sort