Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check.Check if you run itEPSS 0.20%Mar 10, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.23%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.23%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.71%Mar 7, 2026
- Medium6.1The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ para…Check if you run itEPSS 0.38%Mar 6, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 vi…Check if you run itEPSS 0.37%Mar 6, 2026
- High8.2OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting w…Check if you run itEPSS 0.51%Mar 5, 2026
- Critical9.6Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.36%Mar 4, 2026
- High8.8Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.43%Mar 4, 2026
- High8.8Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.80%Mar 4, 2026
- High8.8Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.72%Mar 4, 2026
- High8.6An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code i…Check if you run itEPSS 0.41%Mar 3, 2026
- High8.4In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check.Check if you run itEPSS 0.14%Mar 2, 2026
- High8.4In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code.Check if you run itEPSS 0.24%Mar 2, 2026
- High8.4In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code.Check if you run itEPSS 0.16%Mar 2, 2026