Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined pat…Check if you run itEPSS 0.16%Jun 3, 2026
- Medium6.4Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 enables WPS 2.0 by default with a weak lockout policy (60-second lockout after 10 attempts).Check if you run itEPSS 0.14%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port…Check if you run itEPSS 0.23%Jun 3, 2026
- Medium5.9Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding.Check if you run itEPSS 0.15%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP.Check if you run itEPSS 0.17%Jun 3, 2026
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting i…Check if you run itEPSS 0.18%Jun 3, 2026
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks…Check if you run itEPSS 0.18%Jun 3, 2026
- High7.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode.Check if you run itEPSS 0.10%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks.Check if you run itEPSS 0.25%Jun 3, 2026
- High8.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and Get…Check if you run itEPSS 0.21%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action.Check if you run itEPSS 0.17%Jun 3, 2026
- Medium4.8Dovestones Softwares ADPhonebook before v4.0.1.1 is vulnerable to a Cross Site Scripting vulnerability.Check if you run itEPSS 0.18%Jun 3, 2026
- Medium6.1A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.18%Jun 3, 2026
- Medium6.1A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affect…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the wh…Check if you run itEPSS 0.15%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on me…Check if you run itEPSS 0.15%Jun 3, 2026
- High7.1Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauth…Check if you run itEPSS 0.20%Jun 3, 2026
- High8.8A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the configuration is used.Check if you run itEPSS 6.18%Jun 3, 2026
- High7.0GLPI is a free asset and IT management software package.Check if you run itEPSS 0.25%Jun 3, 2026
- High8.4GLPI is a free asset and IT management software package.Check if you run itEPSS 0.34%Jun 3, 2026
- Medium5.9GLPI is a free asset and IT management software package.Check if you run itEPSS 0.24%Jun 3, 2026
- High7.0GLPI is a free asset and IT management software package.Check if you run itEPSS 0.30%Jun 3, 2026
- High7.0GLPI is a free asset and IT management software package.Check if you run itEPSS 0.35%Jun 3, 2026
- Medium6.3unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canon…Check if you run itEPSS 0.49%Jun 3, 2026
Sort