Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfoCheck if you run itEPSS 0.25%Aug 7, 2025
- High8.8Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.Check if you run itEPSS 0.33%Aug 7, 2025
- High8.7: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free UploadCheck if you run itEPSS 0.46%Aug 7, 2025
- High7.0EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access.Check if you run itEPSS 0.16%Aug 7, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryAug 7, 2025
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryAug 7, 2025
- High8.6SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.23%Aug 7, 2025
- Medium5.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.23%Aug 7, 2025
- Low2.5tmp is a temporary file and directory creator for node.js.Check if you run itEPSS 0.38%Aug 7, 2025
- Low2.3Let's Encrypt client and ACME library written in Go (Lego).Check if you run itEPSS 0.24%Aug 7, 2025
- Medium6.9Thinbus Javascript Secure Remote Password is a browser SRP6a implementation for zero-knowledge password authentication.Check if you run itEPSS 0.41%Aug 7, 2025
- High7.1Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.23%Aug 7, 2025
- High7.4LinkJoin through 882f196 mishandles token ownership in password reset.Check if you run itEPSS 0.34%Aug 7, 2025
- High7.4LinkJoin through 882f196 mishandles lacks type checking in password reset.Check if you run itEPSS 0.36%Aug 7, 2025
- Medium5.7ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used.Check if you run itEPSS 0.16%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js.Check if you run itEPSS 0.27%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js.Check if you run itEPSS 0.27%Aug 7, 2025
- Medium6.4In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js.Check if you run itEPSS 0.27%Aug 7, 2025
- UnknownCVE-2025-54574 is named in an emergency Cloudflare managed-rules release.Check this weekEPSS 23.96%Aug 7, 2025
- Medium4.3Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users.Check if you run itEPSS 0.28%Aug 7, 2025
- Medium5.4Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection.Check if you run itEPSS 0.26%Aug 7, 2025
- Medium6.1Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data.Check if you run itEPSS 0.28%Aug 7, 2025
- Medium5.3Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources.Check if you run itEPSS 0.32%Aug 7, 2025
- Medium5.4Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection.Check if you run itEPSS 0.27%Aug 7, 2025
- Medium6.1Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189.Check if you run itEPSS 0.38%Aug 7, 2025
Sort