Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memor…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium6.5Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process m…Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- High7.1Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process.Check if you run itEPSS 0.18%Apr 1, 2026
- Medium4.3The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the en…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium5.5The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF.Check if you run itEPSS 0.11%Apr 1, 2026
- Medium5.5The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources.Check if you run itEPSS 0.11%Apr 1, 2026
- High7.8The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged use…Check if you run itEPSS 0.26%Apr 1, 2026
- High7.5The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) imm…Check if you run itEPSS 0.11%Apr 1, 2026
- High8.7XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions.Check if you run itEPSS 0.35%Apr 1, 2026
- Critical9.3XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts.Check if you run itEPSS 0.46%Apr 1, 2026
- High8.7XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes.Check if you run itEPSS 0.27%Apr 1, 2026
- Medium5.3XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium5.5A weakness has been identified in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Low1.9A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium6.2iccDEV provides a set of libraries and tools for working with ICC color management profiles.Check if you run itEPSS 0.18%Mar 31, 2026
- Low2.1A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DN…Check if you run itEPSS 0.88%Mar 31, 2026
- Medium5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium6.3Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications.Check if you run itEPSS 0.36%Mar 31, 2026
- Medium4.8The Claude SDK for Python provides access to the Claude API from Python applications.Check if you run itEPSS 0.13%Mar 31, 2026
- Medium6.9FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.29%Mar 31, 2026
- Medium6.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.22%Mar 31, 2026
Sort