Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting i…Check if you run itEPSS 0.30%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing…Check if you run itEPSS 0.27%Jun 3, 2026
- Medium6.1A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affect…Check if you run itEPSS 0.18%Jun 3, 2026
- Critical9.8An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands vi…Check if you run itEPSS 3.04%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.43%Jun 3, 2026
- Medium5.3daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing.Check if you run itEPSS 0.29%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.43%Jun 3, 2026
- High8.6Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 88.20%Jun 3, 2026
- Medium5.3Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream witho…Check if you run itEPSS 0.41%Jun 3, 2026
- Low2.3In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request…Check if you run itEPSS 0.47%Jun 3, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.50%Jun 3, 2026
- Low2.3A flaw has been found in dask up to 3.0.Check if you run itEPSS 0.29%Jun 3, 2026
- Low2.1A security vulnerability has been detected in EIPStackGroup OpENer up to 2.3.0.Check if you run itEPSS 0.24%Jun 3, 2026
- Medium4.3The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.19%Jun 3, 2026
- Low2.1A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37.Check if you run itEPSS 0.22%Jun 3, 2026
- High8.1DD-WRT Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 4.00%Jun 3, 2026
- Critical9.6LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.41%Jun 2, 2026
- High7.1LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.34%Jun 2, 2026
- Low2.1A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.Check if you run itEPSS 0.23%Jun 2, 2026
- High8.7BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to ex…Check if you run itEPSS 0.80%Jun 2, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.48%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.37%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint.Check if you run itEPSS 0.63%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesl…Check if you run itEPSS 0.35%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.67%Jun 2, 2026