Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es…Check if you run itEPSS 0.35%Apr 28, 2026
- High7.5Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruptio…Check if you run itEPSS 0.28%Apr 28, 2026
- High8.3Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.34%Apr 28, 2026
- High8.3Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.28%Apr 28, 2026
- High8.3Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…Check if you run itEPSS 0.28%Apr 28, 2026
- High8.3Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to p…Check if you run itEPSS 0.30%Apr 28, 2026
- High8.8Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially p…Check if you run itEPSS 0.32%Apr 28, 2026
- High7.5Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.28%Apr 28, 2026
- Medium4.8An authenticated attacker with permission to edit document content can store crafted HTML/JavaScript in a Document embed editable and cause script execution when the p…Check if you run itEPSS 0.29%Apr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0.Check if you run itEPSS 0.36%Apr 27, 2026
- Medium6.1pretalx is a conference planning tool.Check if you run itEPSS 0.26%Apr 24, 2026
- High8.8SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.20%Apr 24, 2026
- Medium6.1Astro is a web framework.Check if you run itEPSS 0.27%Apr 24, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix use of wrong skb when comparing queued RESP challenge serial In rxrpc_post_response(), t…Check if you run itEPSS 0.61%Apr 24, 2026
- Medium6.4The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up…Check if you run itEPSS 0.35%Apr 24, 2026
- Medium5.4AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.27%Apr 24, 2026
- High7.2A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation…Check if you run itEPSS 0.59%Apr 24, 2026
- Medium5.4pretalx is a conference planning tool.Check if you run itEPSS 0.27%Apr 23, 2026
- High7.7Mako is a template library written in Python.Check if you run itEPSS 0.53%Apr 23, 2026
- Critical9.6Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.34%Apr 23, 2026
- Critical9.6Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…Check if you run itEPSS 0.34%Apr 23, 2026
- Medium4.6An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered.Check if you run itEPSS 0.29%Apr 22, 2026
- Medium6.9Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side…Check if you run itEPSS 1.11%Apr 22, 2026
- Medium4.3The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- Medium6.4The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.32%Apr 22, 2026