Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin.Check if you run itEPSS 0.29%Aug 19, 2025
- High8.1Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141.Check if you run itEPSS 0.40%Aug 19, 2025
- Critical9.8Memory safety bugs present in Firefox 141 and Thunderbird 141.Check if you run itEPSS 0.49%Aug 19, 2025
- Medium6.5Spoofing issue in the Address Bar component.Check if you run itEPSS 0.27%Aug 19, 2025
- Medium6.5Spoofing issue in the Address Bar component of Firefox Focus for Android.Check if you run itEPSS 0.22%Aug 19, 2025
- High7.5Denial-of-service due to out-of-memory in the Graphics: WebRender component.Check if you run itEPSS 0.41%Aug 19, 2025
- High8.1Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141.Check if you run itEPSS 0.51%Aug 19, 2025
- Medium6.5Uninitialized memory in the JavaScript Engine component.Check if you run itEPSS 0.39%Aug 19, 2025
- High8.1Same-origin policy bypass in the Graphics: Canvas2D component.Check if you run itEPSS 0.27%Aug 19, 2025
- Critical9.8An attacker was able to perform memory corruption in the GMP process which processes encrypted media.Check if you run itEPSS 0.61%Aug 19, 2025
- Medium5.1A vulnerability has been found in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium4.8A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2.Check if you run itEPSS 0.15%Aug 19, 2025
- Medium6.5nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engineered for modern web infrastructure.Check if you run itEPSS 0.24%Aug 19, 2025
- Medium5.1A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2025.Q1.0 through 2025.Q1.15, 20Check if you run itEPSS 0.18%Aug 19, 2025
- Medium6.9A vulnerability was found in itsourcecode Sports Management System 1.0.Check if you run itEPSS 0.44%Aug 19, 2025
- Medium6.9A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.43%Aug 19, 2025
- Low2.7IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 could disclose sensitive server information to an unauthorizCheck if you run itEPSS 0.25%Aug 19, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.29%Aug 19, 2025
- Medium6.9flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.29%Aug 19, 2025
- Critical9.3flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.27%Aug 19, 2025
- Medium5.4IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting.Check if you run itEPSS 0.24%Aug 19, 2025
- Medium6.9A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0.Check if you run itEPSS 0.56%Aug 19, 2025
- Medium5.3flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.21%Aug 19, 2025
- Medium6.9A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 thCheck if you run itEPSS 0.25%Aug 19, 2025
- Medium6.9flaskBlog is a blog app built with Flask.Check if you run itEPSS 0.37%Aug 19, 2025
Sort