Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ángel C.Check this weekEPSS 26.00%Jun 6, 2025
- Medium4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source rCheck if you run itEPSS 0.31%Jun 4, 2025
- High7.5Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.Check if you run itEPSS 0.24%Jun 3, 2025
- High7.8Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.Check this weekEPSS 10.00%Jun 3, 2025
- High7.8Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.Check if you run itEPSS 8.00%Jun 3, 2025
- High8.2Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.Check if you run itEPSS 0.30%Jun 3, 2025
- High8.2Information disclosure may occur while processing goodbye RTCP packet from network.Check if you run itEPSS 0.24%Jun 3, 2025
- High8.2Information disclosure may occur while decoding the RTP packet with invalid header extension from network.Check if you run itEPSS 0.24%Jun 3, 2025
- High8.2Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.Check this weekEPSS 25.00%Jun 3, 2025
- High7.8Memory corruption may occur while attaching VM when the HLOS retains access to VM.Check if you run itEPSS 8.00%Jun 3, 2025
- High8.8Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.45%Jun 2, 2025
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 7.82%Jun 2, 2025
- High7.5Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.02%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 84.00%Jun 2, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Compare and Google Maps widgets in all versions upCheck if you run itEPSS 0.29%May 30, 2025
- Medium5.4Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.64%May 27, 2025
- Medium5.4Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page.Check this weekEPSS 24.00%May 27, 2025
- Medium5.4Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check this weekEPSS 38.00%May 27, 2025
- Medium6.5Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfCheck this weekEPSS 42.00%May 27, 2025
- High8.8Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 2.77%May 27, 2025
- Medium6.5Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.42%May 27, 2025
- Medium5.4Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.34%May 27, 2025
- High8.8Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.62%May 27, 2025
- Medium5.5In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array().Check this weekEPSS 10.00%May 27, 2025
- High8.4There is a possible bypass of carrier restrictions due to an unusual root cause.Check this weekEPSS 11.00%May 27, 2025