Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors versions VG4.1.1, VG4.0.3, and lower (with VG4.2 partially affected) contain a network…Check if you run itEPSS 0.16%Jun 2, 2026
- High8.3Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attacker…Check if you run itEPSS 0.11%Jun 2, 2026
- High8.3Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attacker…Check if you run itEPSS 0.11%Jun 2, 2026
- High7.5Quadratic complexity in WordDecoder.DecodeHeader in mimeCheck if you run itEPSS 0.56%Jun 2, 2026
- High7.1BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated network-adjacent at…Check if you run itEPSS 0.42%Jun 2, 2026
- High8.7BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to ex…Check if you run itEPSS 0.80%Jun 2, 2026
- Low2.1A vulnerability has been found in SourceCodester Human Resource Management 1.0.Check if you run itEPSS 0.24%Jun 2, 2026
- Medium5.5A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800.Check if you run itEPSS 0.50%Jun 2, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.48%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.37%Jun 2, 2026
- Medium5.9FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser.Check if you run itEPSS 0.43%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesl…Check if you run itEPSS 0.35%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.67%Jun 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.21%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.30%Jun 2, 2026
- Medium6.6React Router is a router for React.Check if you run itEPSS 0.22%Jun 2, 2026
- Medium6.5wire-ios is an iOS client for the Wire secure messaging application.Check if you run itEPSS 0.41%Jun 2, 2026
- High7.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.50%Jun 2, 2026
- Medium6.1Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHEMA, Memo Rendering Componen…Check if you run itEPSS 0.31%Jun 2, 2026
- Low2.1A weakness has been identified in nextlevelbuilder GoClaw up to 3.11.3.Check if you run itEPSS 0.21%Jun 2, 2026
- Medium5.5A vulnerability was identified in DedeCMS 5.7.88.Check if you run itEPSS 0.31%Jun 2, 2026
- High8.2Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive informati…Check if you run itEPSS 0.10%Jun 2, 2026
- Medium6.3Dräger Atlan A350 versions 1.00 up to and including 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sendin…Check if you run itEPSS 0.24%Jun 2, 2026
- High8.3Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files.Check if you run itEPSS 0.12%Jun 2, 2026
- High7.1Dräger Infinity M300 patient worn monitors with software version VG2.x and earlier contain a network-based denial of service vulnerability that allows attackers with a…Check if you run itEPSS 0.18%Jun 2, 2026
Sort