Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks.Check if you run itEPSS 0.30%May 27, 2025
- High7.5In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled.Check if you run itEPSS 0.29%May 27, 2025
- High8.1Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10.Check if you run itEPSS 0.48%May 27, 2025
- High8.1Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10.Check if you run itEPSS 0.51%May 27, 2025
- Medium5.4A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page.Check if you run itEPSS 0.28%May 27, 2025
- Medium4.3Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks.Check if you run itEPSS 0.34%May 27, 2025
- Medium4.8Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code exeCheck if you run itEPSS 0.21%May 27, 2025
- Medium4.8Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execuCheck if you run itEPSS 0.30%May 27, 2025
- Medium4.3Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks.Check if you run itEPSS 0.27%May 27, 2025
- High7.5A double-free could have occurred in after a failed allocation when initializing the encoder for WebRTC.Check if you run itEPSS 0.46%May 27, 2025
- High8.8The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of the property_package_user_role metadata in versions 1.0.5 toCheck if you run itEPSS 0.46%May 27, 2025
- Medium4.8On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it is possible to load a dynamic library with Viscosity's TCC (Check if you run itEPSS 0.16%May 27, 2025
- High7.5An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicioCheck if you run itEPSS 0.62%May 27, 2025
- Critical9.8The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism.Check if you run itEPSS 0.49%May 27, 2025
- Critical9.8Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or dCheck if you run itEPSS 0.64%May 27, 2025
- High7.5An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-serviceCheck if you run itEPSS 0.52%May 27, 2025
- High7.5An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for tCheck if you run itEPSS 0.52%May 27, 2025
- Critical9.3Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network.Check if you run itEPSS 0.51%May 27, 2025
- Medium5.6A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code on users machines.ThisCheck if you run itEPSS 0.36%May 27, 2025
- Medium5.1Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSSCheck if you run itEPSS 0.23%May 27, 2025
- Medium5.3Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injectionCheck if you run itEPSS 0.42%May 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryMay 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryMay 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryMay 27, 2025
- None0.0Rejected reason: Not usedOpen the advisoryMay 27, 2025
Sort