Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In IMS, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.30%May 6, 2026
- Medium6.5titra is an open source time tracking project.Check if you run itEPSS 0.37%May 4, 2026
- High8.8In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code.Check if you run itEPSS 0.54%May 4, 2026
- Critical9.4In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause t…Check if you run itEPSS 0.72%May 4, 2026
- UnknownWP Go Maps AJAX Action Unathenticated Cross-Site Scripting (XSS)Patch nowKEVEPSS 1.98%May 4, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057.Check if you run itEPSS 0.48%May 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().Check if you run itEPSS 0.17%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK C…Check if you run itEPSS 0.17%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the…Check if you run itEPSS 0.17%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for…Check if you run itEPSS 0.17%May 1, 2026
- High8.8Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High8.8Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.32%Apr 28, 2026
- Low3.1Insufficient validation of untrusted input.Check if you run itEPSS 0.24%Apr 28, 2026
- High8.8Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es…Check if you run itEPSS 0.35%Apr 28, 2026
- High8.8Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High7.5Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruptio…Check if you run itEPSS 0.28%Apr 28, 2026
- High8.8Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High8.8Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High8.8Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.35%Apr 28, 2026
- High8.3Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.34%Apr 28, 2026
- High8.3Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.28%Apr 28, 2026
- Low3.1Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafte…Check if you run itEPSS 0.13%Apr 28, 2026
- High8.3Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…Check if you run itEPSS 0.28%Apr 28, 2026
- High7.5Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicio…Check if you run itEPSS 0.17%Apr 28, 2026
- High8.8Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026