Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory.Check if you run itEPSS 0.33%Jun 3, 2026
- High7.5Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS…Check if you run itEPSS 0.34%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.37%Jun 3, 2026
- Low1.2An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabli…Check if you run itEPSS 0.20%Jun 3, 2026
- Medium6.5An out-of-bounds read in the ext4_ext_binsearch_idx function in src/ext4_extent.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by supplyin…Check if you run itEPSS 0.29%Jun 3, 2026
- Medium5.5A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service…Check if you run itEPSS 0.16%Jun 3, 2026
- Medium5.0A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to…Check if you run itEPSS 0.11%Jun 3, 2026
- Medium4.3An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036…Check if you run itEPSS 0.28%Jun 3, 2026
- Medium4.1An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4…Check if you run itEPSS 0.30%Jun 3, 2026
- Medium5.9A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential.Check if you run itEPSS 0.13%Jun 3, 2026
- High7.8An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users…Check if you run itEPSS 0.12%Jun 3, 2026
- High7.8An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before…Check if you run itEPSS 0.12%Jun 3, 2026
- Unknowncrypton-x509-validation and crypton-x509 do not enforce X.509 Name ConstraintsCheck if you run itEPSS 0.22%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.Check if you run itEPSS 0.47%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.Check if you run itEPSS 0.46%Jun 3, 2026
- High8.7A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.Check if you run itEPSS 0.46%Jun 3, 2026
- High8.7The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.Check if you run itEPSS 0.49%Jun 3, 2026
- High7.2The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- High7.2The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.Check if you run itEPSS 0.37%Jun 3, 2026
- Critical9.3An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.Check if you run itEPSS 0.47%Jun 3, 2026
- Low1.9A vulnerability has been found in cilium ebpf up to 0.21.0.Check if you run itEPSS 0.18%Jun 3, 2026
Sort