CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the component Query Builder UI. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made...

6.5CVSS7.1AI score0.00221EPSS

Exploits0References1

Debian CVE•added 2025/06/19 1:42 a.m.•12 views

CVE-2025-50182

urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means...

6.1CVSS5.6AI score0.0032EPSS

Exploits0

AstraLinux•added 2025/06/16 11:28 a.m.•7 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.9AI score0.00322EPSS

Exploits0References3

BDU FSTEC•added 2025/06/09 12:0 a.m.•8 views

The vulnerability of the browser’s Background Fetch API programming interface in Google Chrome, which allows a perpetrator to disclose protected information

The vulnerability of the Background Fetch API in Google Chrome browser’s software interface is related to the disclosure of information. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information through a specially created HTML page...

6.4CVSS5.8AI score0.00322EPSS

Exploits0References10Affected Software4

RedhatCVE•added 2025/05/29 9:30 p.m.•9 views

CVE-2025-5064

Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.9AI score0.00322EPSS

Exploits0References1

Microsoft CVE•added 2025/05/29 6:55 p.m.•305 views

Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

5.4CVSS6.9AI score0.00322EPSS

Exploits0