Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.34%Apr 8, 2026
- High8.8Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.57%Apr 8, 2026
- Medium5.9Zammad is a web based open source helpdesk/customer support system.Check if you run itEPSS 0.15%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Manoj Kumar MK Google Directions google-distance-calculator allow…Check if you run itEPSS 0.22%Apr 8, 2026
- Critical9.8The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the function in all versions up to,…Check if you run itEPSS 1.34%Apr 8, 2026
- High7.2An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work w…Check if you run itEPSS 0.32%Apr 7, 2026
- Critical9.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.19%Apr 6, 2026
- High8.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.27%Apr 6, 2026
- Medium6.2In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion.Check if you run itEPSS 0.10%Apr 6, 2026
- Medium5.5In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation.Check if you run itEPSS 0.10%Apr 6, 2026
- Low1.9A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- Low2.1A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83.Check if you run itEPSS 0.35%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dp…Check if you run itEPSS 0.13%Apr 3, 2026
- High7.7Tinyauth is an authentication and authorization server.Check if you run itEPSS 0.33%Apr 2, 2026
- Critical9.8Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go.Check if you run itEPSS 0.69%Apr 1, 2026
- High8.8Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.31%Apr 1, 2026
- Medium6.5Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memor…Check if you run itEPSS 0.28%Apr 1, 2026
- Critical9.6Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…Check if you run itEPSS 0.31%Apr 1, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.31%Apr 1, 2026
- Critical9.6Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.31%Apr 1, 2026
- High8.8Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.Check if you run itEPSS 0.34%Apr 1, 2026
- High8.8Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.36%Apr 1, 2026
- High8.8Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.46%Apr 1, 2026
- High7.5Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a craf…Check if you run itEPSS 0.34%Apr 1, 2026