Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5In Modem, there is a possible system crash due to an uncaught exception.Check this weekEPSS 83.00%May 5, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369Check this weekEPSS 21.00%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl It is possible to peep kernel page's data by pCheck this weekEPSS 21.00%May 2, 2025
- High7.8Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privilegCheck this weekEPSS 17.00%May 2, 2025
- High7.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improperCheck this weekEPSS 40.00%May 2, 2025
- Medium6.5User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.88%May 2, 2025
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.39%Apr 30, 2025
- Medium5.4The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCheck if you run itEPSS 0.27%Apr 30, 2025
- Medium4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS allows attackers to bypass common image source restrictions.Check this weekEPSS 41.00%Apr 29, 2025
- Medium6.1The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.31%Apr 25, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in josheli Simple Google Photos Grid simple-google-photos-grid allows Server Side Request Forgery.This issue affects Simple GoogleCheck if you run itEPSS 0.23%Apr 24, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Peadig’s Google +1 Button google-1 allows DOM-Based XSS.This issue aCheck if you run itEPSS 0.27%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Olav Kolbu Google News allows Stored XSS.Check if you run itEPSS 0.15%Apr 24, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danielpataki ACF: Google Font Selector acf-google-font-selector-field allows RCheck if you run itEPSS 0.29%Apr 24, 2025
- Medium4.3The Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,Check this weekEPSS 28.00%Apr 24, 2025
- High8.2Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.Check this weekEPSS 18.00%Apr 18, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bernd Altmeier Google Maps GPX Viewer google-maps-gpx-viewer allows ReflectedCheck this weekEPSS 29.00%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M.Check if you run itEPSS 0.29%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wppluginboxdev Stylish Google Sheet Reader stylish-google-sheet-reader allowsCheck this weekEPSS 28.00%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in MessageMetric Review Wave – Google Places Reviews review-wave-google-places-reviews allows Stored XSS.This issue affects Review WCheck if you run itEPSS 0.15%Apr 17, 2025
- High8.5An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login feature, can login via SSH gaining command-line controlCheck if you run itEPSS 0.20%Apr 17, 2025
- High8.1A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS.Check this weekEPSS 27.00%Apr 17, 2025
- High8.8Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentiallCheck if you run itEPSS 0.22%Apr 16, 2025
- Medium6.5ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept deviceCheck this weekEPSS 20.00%Apr 16, 2025
- High8.8Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code iCheck this weekEPSS 41.00%Apr 16, 2025