Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1There is a possible disclosure of Bluetooth adapter details due to a permissions bypass.Check this weekEPSS 10.00%May 27, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in affmngr Affiliates Manager Google reCAPTCHA Integration affiliates-manager-google-recaptcha-integration allows Stored XSS.This isCheck if you run itEPSS 0.15%May 19, 2025
- High8.7A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling of chunked-encoded HTTP requests.Check if you run itEPSS 0.20%May 16, 2025
- Medium5.4The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating iCheck this weekEPSS 18.00%May 15, 2025
- Medium4.8The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CCheck this weekEPSS 33.00%May 15, 2025
- Critical9.8The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_remote_image_to_media_library funcCheck if you run itEPSS 0.92%May 15, 2025
- UnknownGoogle Chrome Loader Policy Enforcement VulnerabilityPatch nowKEVEPSS 5.38%May 14, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sabuj Kundu CBX Map for Google Map & OpenStreetMap cbxgooglemap allows DOM-BasCheck if you run itEPSS 0.21%May 7, 2025
- High8.8Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.47%May 6, 2025
- High8.9Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.Check this weekEPSS 19.00%May 6, 2025
- High7.8Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.Check this weekEPSS 11.00%May 6, 2025
- High7.8Memory corruption while reading the FW response from the shared queue.Check this weekEPSS 11.00%May 6, 2025
- High7.5Transient DOS while parsing per STA profile in ML IE.Check this weekEPSS 35.00%May 6, 2025
- High7.8Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.Check this weekEPSS 11.00%May 6, 2025
- High7.5Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.Check this weekEPSS 26.00%May 6, 2025
- High8.2Memory corruption while decoding of OTA messages from T3448 IE.Check this weekEPSS 29.00%May 6, 2025
- High7.8Memory corruption during the FRS UDS generation process.Check this weekEPSS 11.00%May 6, 2025
- High7.8Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.Check if you run itEPSS 9.00%May 6, 2025
- High7.8Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.Check this weekEPSS 11.00%May 6, 2025
- High7.8Memory corruption while reading secure file.Check this weekEPSS 11.00%May 6, 2025
- High7.8Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leadingCheck if you run itEPSS 0.11%May 6, 2025
- Critical9.8Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.54%May 5, 2025
- Medium6.3Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.28%May 5, 2025
- High8.8Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially explCheck if you run itEPSS 0.43%May 5, 2025
- High8.8Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.44%May 5, 2025