Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is n…Check if you run itEPSS 0.11%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: clear stale link mapping of ahvif->links_map When an arvif is initialized in non-AP S…Check if you run itEPSS 0.12%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gfx3d: add parent to parent request map After commit d228ece36345 ("clk: divider: remove…Check if you run itEPSS 0.12%Jun 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free for extcon in IRQ handler Using the variant for reque…Check if you run itEPSS 0.13%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dc_link NULL handling in HPD init amdgpu_dm_hpd_init() may see connectors with…Check if you run itEPSS 0.15%Jun 3, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), when processing inner…Check if you run itEPSS 0.42%Jun 3, 2026
- High7.8OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.19%Jun 3, 2026
- Medium6.3A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature.Check if you run itEPSS 0.27%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aid…Check if you run itEPSS 0.16%Jun 3, 2026
- Medium5.9Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 contains hardcoded WiFi driver credentials including a RADIUS shared secret, WPS test key, and default PSK emb…Check if you run itEPSS 0.14%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 exposes an undocumented /agileconfigreset endpoint that returns internal buffer contents to unauthenticated at…Check if you run itEPSS 0.17%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined pat…Check if you run itEPSS 0.16%Jun 3, 2026
- Medium6.4Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 enables WPS 2.0 by default with a weak lockout policy (60-second lockout after 10 attempts).Check if you run itEPSS 0.14%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized buffer when receiving POST requests without SOAPAction header on UPnP port…Check if you run itEPSS 0.23%Jun 3, 2026
- Medium5.9Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding.Check if you run itEPSS 0.15%Jun 3, 2026
- High7.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP.Check if you run itEPSS 0.17%Jun 3, 2026
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting i…Check if you run itEPSS 0.18%Jun 3, 2026
- High8.8Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows unauthenticated brute-force attacks via the TDDP password change endpoint (code=10), which lacks…Check if you run itEPSS 0.18%Jun 3, 2026
- High7.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 encrypts configuration backups with a hardcoded DES key using single DES in ECB mode.Check if you run itEPSS 0.10%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 is vulnerable to a HTTP denial of service via a low number of crafted incomplete HTTP requests, causing…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium6.5Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks.Check if you run itEPSS 0.25%Jun 3, 2026
- High8.1Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and Get…Check if you run itEPSS 0.21%Jun 3, 2026
- Medium4.3Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 discloses kernel memory layout via the UPnP GetStatusInfo action.Check if you run itEPSS 0.17%Jun 3, 2026
- Medium4.8Dovestones Softwares ADPhonebook before v4.0.1.1 is vulnerable to a Cross Site Scripting vulnerability.Check if you run itEPSS 0.18%Jun 3, 2026
- Medium6.1A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.18%Jun 3, 2026
Sort