Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.24%Feb 26, 2026
- Medium5.4Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject s…Check if you run itEPSS 0.20%Feb 23, 2026
- Critical9.8Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.37%Feb 23, 2026
- Critical9.1Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.34%Feb 23, 2026
- High7.7Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an u…Check if you run itEPSS 0.46%Feb 20, 2026
- High8.6Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but…Check if you run itEPSS 0.55%Feb 20, 2026
- High7.5Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-sheet allows Exploiting Inco…Check if you run itEPSS 0.27%Feb 20, 2026
- Medium6.5Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Securi…Check if you run itEPSS 0.26%Feb 20, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Code Injection.Thi…Check if you run itEPSS 0.39%Feb 20, 2026
- High8.8Google Chromium CSS Use-After-Free VulnerabilityPatch nowKEVEPSS 54.96%Feb 13, 2026
- Unknownsoftlabbd integrate_google_drive Missing AuthorizationPatch nowKEVEPSS 7.33%Jan 26, 2026
- UnknownGoogle Chrome Improper Input ValidationPatch nowKEVEPSS 99.59%Jan 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_header() robust Analog to commit db5b4e39c4e6 ("ip6_gre: make ip6gre_heade…Check if you run itEPSS 0.21%Jan 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6_addr_del().Check if you run itEPSS 0.20%Jan 25, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().Check if you run itEPSS 0.59%Dec 24, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface When performing reset…Check if you run itEPSS 0.19%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().Check if you run itEPSS 0.22%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix race condition on death_list Rust Binder contains the following unsafe operation:…Check if you run itEPSS 0.21%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_diag_dump The syzbot report a crash: Oops: general p…Check if you run itEPSS 0.20%Dec 16, 2025
- High8.8Google Chromium Out of Bounds Memory Access VulnerabilityPatch nowKEVEPSS 22.33%Dec 12, 2025
- High8.7A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX.Check if you run itEPSS 0.37%Dec 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk->max_recvmsg_len syzbot reported a data-race in data-rac…Check if you run itEPSS 0.19%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: fix UAF in hugetlb_handle_userfault The vma_lock and hugetlb_fault_mutex are dropped b…Check if you run itEPSS 0.15%Dec 8, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto syzbot reported a possible…Check if you run itEPSS 0.22%Dec 6, 2025
- High7.2The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input…Check if you run itEPSS 0.40%Dec 6, 2025