Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding.Check if you run itEPSS 0.19%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP.Check if you run itEPSS 0.23%Jun 3, 2026
- High7.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode.Check if you run itEPSS 0.14%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks.Check if you run itEPSS 0.35%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium6.1A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affect…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the wh…Check if you run itEPSS 0.15%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on me…Check if you run itEPSS 0.12%Jun 3, 2026
- High7.1Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauth…Check if you run itEPSS 0.20%Jun 3, 2026
- High8.8A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the configuration is used.Check if you run itEPSS 0.27%Jun 3, 2026
- Medium6.3unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canon…Check if you run itEPSS 0.49%Jun 3, 2026
- Medium5.1backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.Check if you run itEPSS 0.30%Jun 3, 2026
- Low2.3An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.Check if you run itEPSS 0.21%Jun 3, 2026
- Low2.3An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.Check if you run itEPSS 0.28%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.43%Jun 3, 2026
- Medium6.9ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 1…Check if you run itEPSS 0.42%Jun 3, 2026
- Medium5.1ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects.Check if you run itEPSS 0.49%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.43%Jun 3, 2026
- Low1.2An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabli…Check if you run itEPSS 0.20%Jun 3, 2026
- Medium4.1An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4…Check if you run itEPSS 0.30%Jun 3, 2026
- Medium5.9A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential.Check if you run itEPSS 0.13%Jun 3, 2026
- Unknowncrypton-x509-validation and crypton-x509 do not enforce X.509 Name ConstraintsCheck if you run itEPSS 0.32%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.Check if you run itEPSS 0.58%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.Check if you run itEPSS 0.58%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.Check if you run itEPSS 0.58%Jun 3, 2026
Sort