Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5bt_sdp_parse_attribute() in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID (a che…Check if you run itEPSS 0.30%Jun 23, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCheck if you run itEPSS 0.30%Jun 19, 2026
- Critical9.6NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.Check if you run itEPSS 0.35%Jun 18, 2026
- High8.8A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client).Check if you run itEPSS 0.64%Jun 15, 2026
- High7.1Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%Jun 10, 2026
- UnknownCVE-2026-48856 affecting package erlang for versions less than 26.2.5.21-2Open the advisoryJun 10, 2026
- Medium6.3HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2Check if you run itEPSS 0.45%Jun 8, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityPatch nowKEVEPSS 25.32%Jun 4, 2026
- Medium4.8FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.44%Jun 3, 2026
- Medium6.9FOSSBilling is a free, open-source billing and client management system.Check if you run itEPSS 0.47%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages LOCALIO is an NFS loopbac…Check if you run itEPSS 0.13%Jun 3, 2026
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting i…Check if you run itEPSS 0.30%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing…Check if you run itEPSS 0.27%Jun 3, 2026
- Medium6.1A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affect…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium5.1backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.Check if you run itEPSS 0.30%Jun 3, 2026
- Low1.2An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabli…Check if you run itEPSS 0.20%Jun 3, 2026
- Medium5.9A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential.Check if you run itEPSS 0.13%Jun 3, 2026
- Unknowncrypton-x509-validation and crypton-x509 do not enforce X.509 Name ConstraintsCheck if you run itEPSS 0.32%Jun 3, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.50%Jun 3, 2026
- Medium4.3The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.19%Jun 3, 2026
- Medium6.5LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.39%Jun 2, 2026
- Medium4.9alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.Check if you run itEPSS 0.47%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.67%Jun 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.21%Jun 2, 2026
- Low2.3Pterodactyl is a free, open-source game server management panel.Check if you run itEPSS 0.35%Jun 2, 2026