Browse CVEs

HIGH 7.5 CVE-2026-15271 A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by th… Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-51926 An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive information via the login.php component. A vulnerability w… Mitigation only Fix from $1,9502026-07-09 HIGH 8.1 CVE-2026-51925 A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.11.11c that allows a remote attacker to execute arbitrary code via the df… Mitigation only Fix from $1,9502026-07-09 HIGH 8.1 CVE-2026-51924 An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the file upload and report.php component Mitigation only Fix from $1,9502026-07-09 HIGH 8.1 CVE-2026-51923 An Insecure Direct Object Reference (IDOR) vulnerability exists in docuForm GmbH Client v.11.11c allowing a remote attacker to execute arbitrary code… Mitigation only Fix from $1,9502026-07-09 MEDIUM 6.5 CVE-2026-33801 An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS … Junos Mitigation only Fix from $1,6002026-07-09 MEDIUM 6.5 CVE-2026-33800 An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthe… Mitigation only Fix from $1,6002026-07-09 MEDIUM 5.9 CVE-2026-33794 An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos … Junos Os Evolved Mitigation only Fix from $1,6002026-07-09 MEDIUM 5.7 CVE-2026-31267 Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the administrative web interface. A stack buffer overflow vulne… Mitigation only Fix from $1,6002026-07-09 HIGH 8.1 CVE-2025-45422 Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions and make arbitrary changes to port f… Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-15270 A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/… Dir 823g Firmware Mitigation only Fix from $1,9502026-07-09 HIGH 7.4 CVE-2026-49276 Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the writer field in any blueprint allowed a scripting … Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2025-63579 Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts in… Mitigation only Fix from $1,9502026-07-09 MEDIUM 5.3 CVE-2026-61344 The Superior Court of California Hearing Reminder Service at https://www.hrs.courts.ca.gov exposes an API endpoint that returns court reminder record… Mitigation only Fix from $1,6002026-07-09 HIGH 8.8 CVE-2026-58378 Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root le… Mitigation only Fix from $1,9502026-07-09 MEDIUM 5.3 CVE-2026-15204 A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. Affected by this vulnerability is the function exportO… Mitigation only Fix from $1,6002026-07-09 HIGH 7.5 CVE-2026-51606 An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) causes the device to abruptly terminate the TCP … Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-51605 A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.991) allows an unauthenticated remote attacker to… Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-51604 A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to … Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-51603 A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to … Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-51601 Tenda CP3 V3.0 firmware V31.1.9.91 contains a stack-based buffer overflow in the RTSP service. The device fails to validate the length of the clock= … Mitigation only Fix from $1,9502026-07-09 CRITICAL 9.8 CVE-2026-51599 An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthenticated remot… No fix yet Fix from $2,3002026-07-09 MEDIUM 6.5 CVE-2026-51598 An input validation vulnerability in the RTSP service of MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) allows an unauthenticated, networ… Mitigation only Fix from $1,6002026-07-09 CRITICAL 9.1 CVE-2026-51597 MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication. An adjacent network atta… Mitigation only Fix from $2,3002026-07-09 HIGH 7.5 CVE-2026-51602 A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to … Mitigation only Fix from $1,9502026-07-09 HIGH 7.5 CVE-2026-51600 Tenda CP3 V3.0 firmware V31.1.9.91 does not validate the Content-Length header field in RTSP requests (including DESCRIBE, SETUP, and PLAY methods). … Mitigation only Fix from $1,9502026-07-09 MEDIUM 6.5 CVE-2026-15192 A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sendgrid/postmark/postal/mailjet of the component AP… Mitigation only Fix from $1,6002026-07-09 MEDIUM 6.3 CVE-2026-15191 A flaw has been found in mettle sendportal up to 3.0.1. This vulnerability affects unknown code of the file vendor/mettle/sendportal-core/src/Http/Re… Mitigation only Fix from $1,6002026-07-09 HIGH 7.5 CVE-2026-13462 PayRange Android app, version 7.0.7 and below, contains an SSL bypass vulnerability that allows invalid certificates to be accepted in application we… Mitigation only Fix from $1,9502026-07-09 HIGH 7.3 CVE-2026-15190 A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Perform… Mitigation only Fix from $1,9502026-07-09