Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Memory safety bugs present in Firefox 139 and Thunderbird 139.Check if you run itEPSS 4.26%Jun 24, 2025
- High8.1If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the file extension.Check if you run itEPSS 0.46%Jun 24, 2025
- Medium4.3The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user intoCheck if you run itEPSS 0.28%Jun 24, 2025
- Critical9.8If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complCheck if you run itEPSS 0.30%Jun 24, 2025
- High8.6When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding.Check if you run itEPSS 0.35%Jun 24, 2025
- Medium6.5When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so.Check if you run itEPSS 0.25%Jun 24, 2025
- Medium4.3When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks.Check if you run itEPSS 0.23%Jun 24, 2025
- Medium6.1When a file download is specified via the header, that directive would be ignored if the file was included via a or tag, potentially making a website vulnerable to a cross-site scrCheck if you run itEPSS 0.27%Jun 24, 2025
- Critical9.1An attacker was able to bypass the directive of a Content Security Policy by manipulating subdocuments.Check if you run itEPSS 0.37%Jun 24, 2025
- Medium6.5Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an tag.Check if you run itEPSS 0.36%Jun 24, 2025
- High8.8The executable file warning did not warn users before opening files with the extension.Check if you run itEPSS 0.21%Jun 24, 2025
- Medium4.3An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/priCheck if you run itEPSS 0.31%Jun 24, 2025
- Critical9.8A use-after-free in FontFaceSet resulted in a potentially exploitable crash.Check if you run itEPSS 7.96%Jun 24, 2025
- High8.5A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product.Check if you run itEPSS 0.37%Jun 24, 2025
- High8.3A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product.Check if you run itEPSS 0.23%Jun 24, 2025
- Medium6.9A vulnerability exists in MicroSCADA X SYS600 product.Check if you run itEPSS 0.13%Jun 24, 2025
- High8.7A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in Relion 670/650 and SAM600-IO series device that if exploitedCheck if you run itEPSS 0.37%Jun 24, 2025
- High7.1An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to improper disk space management.Check if you run itEPSS 0.45%Jun 24, 2025
- High7.5The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file tyCheck if you run itEPSS 0.54%Jun 24, 2025
- High8.2A denial-of-service issue in the dns implemenation could cause an infinite loop.Check if you run itEPSS 0.57%Jun 24, 2025
- Critical9.3WRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in the telnet function.Check if you run itEPSS 2.16%Jun 24, 2025
- Medium4.8WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI.Check if you run itEPSS 0.22%Jun 24, 2025
- High8.7WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection DiagnoCheck if you run itEPSS 0.99%Jun 24, 2025
- Medium6.3Gogs is an open source self-hosted Git service.Check if you run itEPSS 0.40%Jun 24, 2025
- Critical10.0Gogs is an open source self-hosted Git service.Check if you run itEPSS 1.15%Jun 24, 2025
Sort