Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent attackers to ex…Check if you run itEPSS 0.80%Jun 2, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.48%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.37%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint.Check if you run itEPSS 0.63%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesl…Check if you run itEPSS 0.35%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.67%Jun 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.21%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.46%Jun 2, 2026
- High8.1React Router is a router for React.Check if you run itEPSS 0.62%Jun 2, 2026
- High8.2Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive informati…Check if you run itEPSS 0.10%Jun 2, 2026
- High7.1Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of service vulnerability that allows network-adjace…Check if you run itEPSS 0.19%Jun 2, 2026
- Medium6.9NamelessMC is website software for Minecraft servers.Check if you run itEPSS 0.44%Jun 2, 2026
- High7.1TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, whic…Check if you run itEPSS 0.30%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client (HT…Check if you run itEPSS 0.52%Jun 2, 2026
- Medium6.3Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint Mint allows attacker-controlled HTTP/1 servers to desynch…Check if you run itEPSS 0.52%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in elixir-mint Mint allows HTTP Request Splitting and HTTP Request Smuggling.Check if you run itEPSS 0.22%Jun 2, 2026
- High7.5OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.Check if you run itEPSS 0.52%Jun 2, 2026
- Medium5.3NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.60%Jun 2, 2026
- Medium6.5A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on t…Check if you run itEPSS 0.99%Jun 2, 2026
- Medium6.3A stack-based buffer overflow in the motion_privacy.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary…Check if you run itEPSS 0.44%Jun 2, 2026
- Medium6.3A stack-based buffer overflow in the export_language.cgi binary in VIVOTEK FD8136 firmware FD8136-VVTK-0300a allows authenticated remote attackers to execute arbitrary…Check if you run itEPSS 0.44%Jun 2, 2026
- Medium6.5D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability.Check if you run itEPSS 0.39%Jun 2, 2026
- Medium4.3The Remove NoFollow Commenter URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5.Check if you run itEPSS 0.19%Jun 2, 2026