Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root com…Check if you run itEPSS 0.56%Oct 15, 2026
- High8.3snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an u…Check if you run itEPSS 0.43%Oct 15, 2026
- High8.7Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRAN…Check if you run itEPSS 0.48%Oct 15, 2026
- Medium6.9NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as…Check if you run itEPSS 0.32%Oct 15, 2026
- High8.7NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest…Check if you run itEPSS 0.36%Oct 15, 2026
- Medium6.9nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API.Check if you run itEPSS 0.14%Oct 15, 2026
- Medium6.8LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.8libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent…Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.9libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash.Check if you run itEPSS 0.13%Oct 15, 2026
- High8.8Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.25%Oct 15, 2026
- Medium6.9MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations via crafted QuickTime chapter samples.Check if you run itEPSS 0.13%Oct 15, 2026
- Medium6.5Improper Input ValidationCheck if you run itEPSS 0.30%Oct 15, 2026
- High8.8Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.8Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.Check if you run itEPSS 0.18%Oct 15, 2026
- High8.8Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.Check if you run itEPSS 0.18%Oct 15, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.29%Oct 15, 2026
- High7.1ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete RoutesCheck if you run itEPSS 0.25%Oct 15, 2026
- Medium6.1ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete RoutesCheck if you run itEPSS 0.23%Oct 15, 2026