Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in affmngr Affiliates Manager Google reCAPTCHA Integration affiliates-manager-google-recaptcha-integration allows Stored XSS.This isCheck if you run itEPSS 0.15%May 19, 2025
- High8.7A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling of chunked-encoded HTTP requests.Check if you run itEPSS 0.20%May 16, 2025
- Medium5.4The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating iCheck this weekEPSS 18.00%May 15, 2025
- Medium4.8The WP Google Review Slider WordPress plugin before 15.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored CCheck this weekEPSS 33.00%May 15, 2025
- Critical9.8The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_remote_image_to_media_library funcCheck if you run itEPSS 0.92%May 15, 2025
- UnknownGoogle Chrome Loader Policy Enforcement VulnerabilityPatch nowKEVEPSS 5.38%May 14, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sabuj Kundu CBX Map for Google Map & OpenStreetMap cbxgooglemap allows DOM-BasCheck if you run itEPSS 0.21%May 7, 2025
- High8.8Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.47%May 6, 2025
- High8.9Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.Check this weekEPSS 19.00%May 6, 2025
- High7.8Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leadingCheck if you run itEPSS 0.11%May 6, 2025
- Critical9.8Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.54%May 5, 2025
- Medium6.3Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretiCheck if you run itEPSS 0.28%May 5, 2025
- High8.8Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially explCheck if you run itEPSS 0.43%May 5, 2025
- High8.8Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.44%May 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbl_device_notify() syzbot reported use-after-free in cfusbl_device_notify()Check this weekEPSS 19.00%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369Check this weekEPSS 21.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4_update_inline_data Syzbot found the following issue: EXT4-fs (loop0): mounted filesystCheck this weekEPSS 21.00%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rose_send_frame() The syzkaller reported an issue: KASAN: null-ptr-deref iCheck this weekEPSS 19.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() Syzbot reported a slab-out-of-bounds Write bug: loopCheck this weekEPSS 24.00%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh is not freed or passed oCheck this weekEPSS 17.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that wasCheck this weekEPSS 23.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when useCheck this weekEPSS 22.00%May 1, 2025
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.39%Apr 30, 2025
- Medium5.4The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCheck if you run itEPSS 0.27%Apr 30, 2025
- Medium4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS allows attackers to bypass common image source restrictions.Check this weekEPSS 41.00%Apr 29, 2025