Browse All CVEs
33,079 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-25730 |
medium | 5.4 | 0.0055 | 2026-10-29 | A background script invoking <code>requestFullscreen</code> and then blocking the main thr | |
CVE-2023-25732 |
high | 8.8 | 0.0074 | 2026-10-29 | When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the | |
CVE-2023-25734 |
high | 8.1 | 0.0077 | 2026-10-29 | After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attac | |
CVE-2023-25735 |
high | 8.8 | 0.0072 | 2026-10-29 | Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other | |
CVE-2023-25737 |
high | 8.8 | 0.0070 | 2026-10-29 | An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lea | |
CVE-2023-25738 |
medium | 6.5 | 0.0063 | 2026-10-29 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being | |
CVE-2023-25739 |
high | 8.8 | 0.0068 | 2026-10-29 | Module load requests that failed were not being checked as to whether or not they were can | |
CVE-2023-25742 |
medium | 6.5 | 0.0065 | 2026-10-29 | When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly | |
CVE-2023-25743 |
high | 7.5 | 0.0065 | 2026-10-29 | A lack of in app notification for entering fullscreen mode could have lead to a malicious | |
CVE-2023-25744 |
high | 8.8 | 0.0067 | 2026-10-29 | Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showe | |
CVE-2023-25746 |
high | 8.8 | 0.0067 | 2026-10-29 | Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of mem | |
CVE-2023-25751 |
medium | 6.5 | 0.0069 | 2026-10-29 | Sometimes, when invalidating JIT code while following an iterator, the newly generated cod | |
CVE-2023-25752 |
medium | 6.5 | 0.0061 | 2026-10-29 | When accessing throttled streams, the count of available bytes needed to be checked in the | |
CVE-2023-28162 |
high | 8.8 | 0.0070 | 2026-10-29 | While implementing AudioWorklets, some code may have casted one type to another, invalid, | |
CVE-2023-28163 |
medium | 6.5 | 0.0080 | 2026-10-29 | When downloading files through the Save As dialog on Windows with suggested filenames cont | |
CVE-2023-28164 |
medium | 6.5 | 0.0035 | 2026-10-29 | Dragging a URL from a cross-origin iframe that was removed during the drag could have led | |
CVE-2023-28176 |
high | 8.8 | 0.0072 | 2026-10-29 | Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed | |
CVE-2023-29535 |
medium | 6.5 | 0.0075 | 2026-10-29 | Following a Garbage Collector compaction, weak maps may have been accessed before they wer | |
CVE-2023-29536 |
high | 8.8 | 0.0070 | 2026-10-29 | An attacker could cause the memory manager to incorrectly free a pointer that addresses at | |
CVE-2023-29539 |
high | 8.8 | 0.0074 | 2026-10-29 | When handling the filename directive in the Content-Disposition header, the filename would | |
CVE-2023-29548 |
medium | 6.5 | 0.0069 | 2026-10-29 | A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization re | |
CVE-2023-29550 |
high | 8.8 | 0.0071 | 2026-10-29 | Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed | |
CVE-2023-32206 |
medium | 6.5 | 0.0070 | 2026-10-29 | An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerabili | |
CVE-2023-32207 |
high | 8.8 | 0.0073 | 2026-10-29 | A missing delay in popup notifications could have made it possible for an attacker to tric | |
CVE-2023-32211 |
medium | 6.5 | 0.0074 | 2026-10-29 | A type checking bug would have led to invalid code being compiled. This vulnerability affe | |
CVE-2023-32212 |
medium | 4.3 | 0.0065 | 2026-10-29 | An attacker could have positioned a `datalist` element to obscure the address bar. This vu | |
CVE-2023-32213 |
high | 8.8 | 0.0075 | 2026-10-29 | When reading a file, an uninitialized value could have been used as read limit. This vulne | |
CVE-2023-3055 |
medium | 4.3 | 0.0021 | 2026-10-29 | The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery | |
CVE-2023-2572 |
medium | 6.1 | 0.0046 | 2026-10-29 | The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outp | |
CVE-2023-33524 |
medium | 5.3 | 0.0095 | 2026-10-29 | Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses t | |
CVE-2023-2186 |
critical | 9.8 | 0.0071 | 2026-10-29 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacke | |
CVE-2023-2187 |
medium | 5.3 | 0.0059 | 2026-10-29 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacke | |
CVE-2023-2085 |
medium | 4.3 | 0.0061 | 2026-10-29 | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionali | |
CVE-2023-27465 |
medium | 4.6 | 0.0028 | 2026-10-29 | A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SI | |
CVE-2023-28829 |
high | 8.8 | 0.0029 | 2026-10-29 | A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC | |
CVE-2023-29129 |
critical | 9.8 | 0.0089 | 2026-10-29 | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= | |
CVE-2023-29178 |
medium | 4.3 | 0.0095 | 2026-10-29 | A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiO | |
CVE-2023-30901 |
high | 8.8 | 0.0036 | 2026-10-29 | A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3. | |
CVE-2023-31238 |
medium | 4.8 | 0.0043 | 2026-10-29 | A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3. | |
CVE-2023-33121 |
medium | 5.5 | 0.0018 | 2026-10-29 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visual | |
CVE-2023-33122 |
medium | 5.5 | 0.0019 | 2026-10-29 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visual | |
CVE-2023-33124 |
high | 7.8 | 0.0022 | 2026-10-29 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visual | |
CVE-2023-29531 |
critical | 9.8 | 0.0097 | 2026-10-29 | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to | |
CVE-2023-29532 |
medium | 5.5 | 0.0019 | 2026-10-29 | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned updat | |
CVE-2023-32214 |
high | 7.5 | 0.0092 | 2026-10-29 | Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial | |
CVE-2023-25747 |
high | 7.5 | 0.0061 | 2026-10-29 | A potential use-after-free in libaudio was fixed by disabling the AAudio backend when runn | |
CVE-2023-29542 |
critical | 9.8 | 0.0094 | 2026-10-29 | A newline in a filename could have been used to bypass the file extension security mechani | |
CVE-2023-29545 |
medium | 6.5 | 0.0058 | 2026-10-29 | Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames con | |
CVE-2023-34414 |
low | 3.1 | 0.0090 | 2026-10-29 | The error page for sites with invalid TLS certificates was missing the activation-delay Fi | |
CVE-2023-34416 |
critical | 9.8 | 0.0093 | 2026-10-29 | Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Som |