Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 65.16%Aug 20, 2025
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- High8.8Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle functCheck if you run itEPSS 0.35%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 23.82%Aug 20, 2025
- UnknownWindows Common Log File System Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 16.78%Aug 20, 2025
- UnknownMicrosoft Windows Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 16.50%Aug 20, 2025
- Critical9.3ProFTPD ProFTPD Hidden FunctionalityPatch nowKEVEPSS 13.76%Aug 20, 2025
- Medium4.8A security flaw has been discovered in neurobin shc up to 4.0.3.Check if you run itEPSS 1.17%Aug 19, 2025
- Medium4.8A vulnerability was identified in neurobin shc up to 4.0.3.Check if you run itEPSS 0.20%Aug 19, 2025
- Medium4.8A vulnerability was determined in neurobin shc up to 4.0.3.Check if you run itEPSS 1.18%Aug 19, 2025
- Medium5.1A security flaw has been discovered in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability was identified in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability was determined in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability was found in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium6.1Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks.Check if you run itEPSS 0.17%Aug 19, 2025
- Medium6.1Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks.Check if you run itEPSS 0.16%Aug 19, 2025
- High7.5Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks.Check if you run itEPSS 0.34%Aug 19, 2025
- Critical9.8Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport.Check if you run itEPSS 0.43%Aug 19, 2025
- Medium6.5Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks.Check if you run itEPSS 0.22%Aug 19, 2025
- Medium6.1Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing forCheck if you run itEPSS 0.16%Aug 19, 2025
- Critical9.1The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme.Check if you run itEPSS 0.39%Aug 19, 2025
- Medium5.4The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked intoCheck if you run itEPSS 0.23%Aug 19, 2025
- Critical9.8Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page.Check if you run itEPSS 0.48%Aug 19, 2025
- Medium4.3A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack.Check if you run itEPSS 0.23%Aug 19, 2025
- Critical9.8Firefox for Android allowed a sandboxed iframe without the attribute to start downloads.Check if you run itEPSS 0.47%Aug 19, 2025
Sort