Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7CVFS contained a missing authentication condition affecting command execution.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained a null pointer dereference affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an out-of-bounds write affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an integer overflow affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High8.7CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.Check if you run itEPSS 0.33%Oct 13, 2026
- Low3.5The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libra…Check if you run itEPSS 0.14%Oct 13, 2026
- Medium5.4openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers.Check if you run itEPSS 0.15%Oct 13, 2026
- High8.6Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy.Check if you run itEPSS 0.19%Oct 13, 2026
- Low3.1H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file .Check if you run itEPSS 0.10%Oct 13, 2026
- High7.1HyperScale contained a path traversal issue affecting information disclosure.Check if you run itEPSS 0.38%Oct 13, 2026
- Medium5.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.38%Oct 13, 2026
- Medium5.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.38%Oct 13, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- Medium4.3Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.18%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.31%Oct 13, 2026
- Critical9.6Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…Check if you run itEPSS 0.31%Oct 13, 2026
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 13, 2026
- High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 13, 2026
- Critical9.6Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic.Check if you run itEPSS 0.34%Oct 13, 2026
- Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toCheck if you run itEPSS 0.16%Oct 13, 2026