Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access.Check if you run itEPSS 0.32%Apr 29, 2025
- Medium6.5A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.Check if you run itEPSS 0.29%Apr 29, 2025
- High7.1An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execCheck if you run itEPSS 0.44%Apr 29, 2025
- Critical9.1A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process insteaCheck if you run itEPSS 0.45%Apr 29, 2025
- Medium5.9Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.Check if you run itEPSS 0.45%Apr 29, 2025
- High8.8Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior.Check if you run itEPSS 0.66%Apr 29, 2025
- Medium4.3A flaw was found in libsoup.Check if you run itEPSS 0.44%Apr 29, 2025
- High7.5A flaw was found in the mod_auth_openidc module for Apache httpd.Check if you run itEPSS 1.58%Apr 29, 2025
- High8.6In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame Andrew and Nikolay reported connectivity issues with CiCheck if you run itEPSS 0.33%Apr 29, 2025
- High7.5When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access (douCheck if you run itEPSS 2.25%Apr 29, 2025
- Medium4.3The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_pluginCheck if you run itEPSS 0.30%Apr 29, 2025
- Medium6.4The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's countdown Block in all veCheck if you run itEPSS 0.28%Apr 29, 2025
- Low3.3libsnowflakeclient is the Snowflake Connector for C/C++.Check if you run itEPSS 0.17%Apr 29, 2025
- High8.8A use-after-free issue was addressed with improved memory management.Check if you run itEPSS 1.30%Apr 29, 2025
- Medium5.7The issue was addressed with improved checks.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7A null pointer dereference was addressed with improved input validation.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7This issue was addressed by removing the vulnerable code.Check if you run itEPSS 0.33%Apr 29, 2025
- Medium5.4An access issue was addressed with improved access restrictions.Check if you run itEPSS 0.51%Apr 29, 2025
- High7.7An authentication issue was addressed with improved state management.Check if you run itEPSS 0.36%Apr 29, 2025
- Medium5.5A null pointer dereference was addressed with improved input validation.Check if you run itEPSS 0.19%Apr 29, 2025
- Medium6.5The issue was addressed with improved checks.Check if you run itEPSS 0.39%Apr 29, 2025
- Medium6.5An integer overflow was addressed with improved input validation.Check if you run itEPSS 0.38%Apr 29, 2025
- Medium6.5A type confusion issue was addressed with improved checks.Check if you run itEPSS 0.38%Apr 29, 2025
- High8.8A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands vCheck if you run itEPSS 0.49%Apr 29, 2025
Sort