CVE Severity Distribution (Last 30 Days)
Found 3 CVEs in the last 30 days.
CVE-2025-6558
HIGH
CVSS: 8.8
EPSS: 9.6%
VulnCheck KEV
PoC Available
CWE-20
T1190
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Published: 2025-07-15
CVE-2025-65589
MEDIUM
CVSS: 6.1
EPSS: 0.4%
CWE-79
T1189
nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.
Published: 2025-12-16
CVE-2025-65581
MEDIUM
CVSS: 5.3
EPSS: 0.3%
CWE-601
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.
Published: 2025-12-16