Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.Check if you run itEPSS 0.24%Apr 29, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy.Check if you run itEPSS 0.24%Apr 29, 2025
- Medium6.3YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.35%Apr 29, 2025
- Medium4.8A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0.Check if you run itEPSS 0.37%Apr 29, 2025
- Medium4.8A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0.Check if you run itEPSS 0.37%Apr 29, 2025
- Medium6.9A vulnerability classified as critical has been found in ScriptAndTools Online-Travling-System 1.0.Check if you run itEPSS 0.56%Apr 29, 2025
- Medium6.9A vulnerability was found in ScriptAndTools Online-Travling-System 1.0.Check if you run itEPSS 0.60%Apr 29, 2025
- Medium6.9A vulnerability was found in ScriptAndTools Online-Travling-System 1.0.Check if you run itEPSS 0.51%Apr 29, 2025
- Medium6.9A vulnerability was found in ScriptAndTools Online-Travling-System 1.0.Check if you run itEPSS 0.56%Apr 29, 2025
- Low1.0DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and soCheck if you run itEPSS 0.22%Apr 29, 2025
- Medium4.8A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical.Check if you run itEPSS 0.35%Apr 29, 2025
- Medium4.8A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical.Check if you run itEPSS 0.35%Apr 29, 2025
- High8.1Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9.Check if you run itEPSS 0.48%Apr 29, 2025
- Medium6.5Memory safety bugs present in Firefox 137 and Thunderbird 137.Check if you run itEPSS 0.30%Apr 29, 2025
- High8.1Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9.Check if you run itEPSS 0.50%Apr 29, 2025
- Medium5.3A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat.Check if you run itEPSS 0.33%Apr 29, 2025
- Medium5.1Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code executioCheck if you run itEPSS 0.19%Apr 29, 2025
- Medium6.5A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage AccesCheck if you run itEPSS 0.18%Apr 29, 2025
- Medium4.8A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access.Check if you run itEPSS 0.32%Apr 29, 2025
- Medium6.5A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog.Check if you run itEPSS 0.29%Apr 29, 2025
- High7.1An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges.Check if you run itEPSS 0.30%Apr 29, 2025
- Medium5.7Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execCheck if you run itEPSS 0.44%Apr 29, 2025
- Critical9.1A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process insteaCheck if you run itEPSS 0.45%Apr 29, 2025
- Medium5.9Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges.Check if you run itEPSS 0.45%Apr 29, 2025
- High8.8Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior.Check if you run itEPSS 0.66%Apr 29, 2025
Sort