CVE Vulnerability Catalog

An integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability has a Chromium security severity of High.

A heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Use-after-free in Media in Google Chrome prior to 147.0.7727.55. A remote attacker could execute arbitrary code inside a sandbox via a crafted HTML page.

Google Chrome prior to version 147.0.7727.55 has a Type Confusion vulnerability in the V8 engine. A remote attacker can exploit a crafted HTML page to execute arbitrary code inside the browser sandbox.

Google Chrome prior to version 147.0.7727.55 has an inappropriate implementation in the V8 engine. A remote attacker can exploit this to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium severity: High.

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55. A remote attacker could execute arbitrary code inside a sandbox via a crafted HTML page.

Use-after-free in V8 in Google Chrome prior to 147.0.7727.55. A remote attacker could execute arbitrary code inside a sandbox via a crafted HTML page.

Google Chrome prior to version 147.0.7727.55 has a use-after-free vulnerability in the WebRTC component. A remote attacker can exploit a crafted HTML page to execute arbitrary code inside a sandbox. This vulnerability has a high Chromium security severity.

Integer overflow vulnerability in WebML in Google Chrome prior to version 147.0.7727.55 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical).

Google Chrome prior to version 147.0.7727.55 has a heap buffer overflow in WebML that a remote attacker can exploit via a crafted HTML page to execute arbitrary code.

Unfurl before version 2026.04 has an unbounded zlib decompression vulnerability in parse_compressed.py. Attackers can send highly compressed payloads via URL parameters to the /json/visjs endpoint, which expand to gigabytes, exhausting server memory and causing denial of service.

UAC (Unix-like Artifacts Collector) before version 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline. The _run_command() function passes constructed command strings directly to eval without proper sanitization, allowing attackers to inject shell metacharacters through attacker-controlled inputs such as %line% values from foreach iterators and %user%/%user_home% values derived from system files.

MemProcFS before 5.17 has multiple unsafe library-loading patterns enabling DLL and shared-library hijacking across six attack surfaces. An attacker can place a malicious library in the working directory or manipulate LD_LIBRARY_PATH to achieve arbitrary code execution.

The parseusbs tool before version 1.9 contains an OS command injection vulnerability. The volume path argument (-v flag) is passed unsanitized to os.popen() with the ls command, allowing arbitrary command injection via shell metacharacters.

A vulnerability in parseusbs prior to version 1.9 allows OS command injection via unsanitized LNK file paths passed to os.popen(). An attacker can embed shell metacharacters in a .lnk filename, leading to arbitrary command execution on the forensic examiner's machine.

ALEAPP (Android Logs Events And Protobuf Parser) through version 3.4.0 contains a path traversal vulnerability in the NQ_Vault.py parser. An attacker can use a controlled database value as the output filename, allowing file writes outside the report directory, potentially leading to code execution.

Sleuth Kit w wersjach do 4.14.0 zawiera podatność na przejście ścieżki w funkcji tsk_recover, która pozwala atakującemu na zapis plików w dowolnych lokalizacjach poza zamierzonym katalogiem odzyskiwania. Atakujący może stworzyć złośliwy obraz systemu plików z wbudowanymi sekwencjami /../ w nazwach plików, co prowadzi do zapisu plików poza katalogiem wyjściowym.

A weakness has been identified in code-projects Easy Blog Site up to version 1.0 in the file /users/contact_us.php. Manipulation of the Name argument leads to SQL injection. The attack can be launched remotely and the exploit is publicly available.

Vulnerability in the MW WP Form plugin for WordPress up to version 5.1.1. Insufficient validation of the $name parameter allows an unauthenticated attacker to move arbitrary files on the server, potentially leading to remote code execution.

PraisonAI before version 4.5.115 contains a template injection vulnerability in the create_agent_centric_tools() function. User input passed to agent.start() is processed without proper escaping, allowing template expressions to be executed instead of being treated as literal text.