Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper access control in resource access validation.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.Check if you run itEPSS 0.48%Apr 29, 2026
- Medium6.5Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.19%Apr 29, 2026
- Critical10.0SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint.Check if you run itEPSS 0.27%Apr 29, 2026
- Medium6.1The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding.Check if you run itEPSS 0.17%Apr 29, 2026
- High7.3Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability.Check if you run itEPSS 0.22%Apr 29, 2026
- Medium6.9Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction o…Check if you run itEPSS 0.10%Apr 29, 2026
- High7.2GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.Check if you run itEPSS 0.29%Apr 29, 2026
- Medium4.3Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.Check if you run itEPSS 0.24%Apr 29, 2026
- High7.5Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence.Check if you run itEPSS 0.49%Apr 29, 2026
- High8.8Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High8.8Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.33%Apr 28, 2026
- Low3.1Insufficient validation of untrusted input.Check if you run itEPSS 0.20%Apr 28, 2026
- High8.8Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es…Check if you run itEPSS 0.35%Apr 28, 2026
- High8.8Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.39%Apr 28, 2026
- High7.5Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruptio…Check if you run itEPSS 0.30%Apr 28, 2026
- High8.8Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High8.8Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.39%Apr 28, 2026
- High8.8Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.35%Apr 28, 2026
- High8.3Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.34%Apr 28, 2026
- High8.3Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.30%Apr 28, 2026
- Low3.1Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafte…Check if you run itEPSS 0.11%Apr 28, 2026
Sort