Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability.Check if you run itEPSS 0.51%May 28, 2025
- Critical9.8An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route.Check if you run itEPSS 0.69%May 28, 2025
- High7.2Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.Check if you run itEPSS 0.25%May 28, 2025
- High7.2Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.Check if you run itEPSS 0.25%May 28, 2025
- High7.2Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.Check if you run itEPSS 0.33%May 28, 2025
- Medium5.5IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.23%May 27, 2025
- Low2.6n affected platforms running Arista EOS, ACL policies may not be enforced.Check if you run itEPSS 0.54%May 27, 2025
- Medium5.3On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific casesCheck if you run itEPSS 0.20%May 27, 2025
- Medium6.5On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resultinCheck if you run itEPSS 0.27%May 27, 2025
- Critical10.0NetAlertX is a network, presence scanner and alert framework.Check if you run itEPSS 0.60%May 27, 2025
- Medium6.5Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access controlCheck if you run itEPSS 0.38%May 27, 2025
- Medium4.4A flaw was found in GNU Coreutils.Check if you run itEPSS 0.31%May 27, 2025
- High7.0A stack buffer overflow was found in Internationl components for unicode (ICU ).Check if you run itEPSS 0.44%May 27, 2025
- Medium5.0A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells.Check if you run itEPSS 0.29%May 27, 2025
- Medium5.4Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.64%May 27, 2025
- Medium5.4Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page.Check if you run itEPSS 0.24%May 27, 2025
- Medium5.4Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.36%May 27, 2025
- Medium6.5Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfCheck if you run itEPSS 0.40%May 27, 2025
- High8.8Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 2.77%May 27, 2025
- Medium6.5Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.40%May 27, 2025
- Medium5.4Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.32%May 27, 2025
- High8.8Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.49%May 27, 2025
- High7.0When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the IdentityCheck if you run itEPSS 0.31%May 27, 2025
- UnknownCVE-2025-32914 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.77%May 27, 2025
- UnknownCVE-2025-32913 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.84%May 27, 2025
Sort