|
931
|
6.8 |
MEDIUM
Physics
|
-
|
-
|
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.
|
CWE-1263
Improper Physical Access Control
|
CVE-2025-4386
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
932
|
6.8 |
MEDIUM
Physics
|
-
|
-
|
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
|
CWE-313
Cleartext Storage in a File or on Disk
|
CVE-2025-4397
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
933
|
8.8 |
HIGH
Network
|
-
|
-
|
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access.
|
CWE-284
Improper Access Control
|
CVE-2026-5786
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
934
|
8.9 |
HIGH
Network
|
-
|
-
|
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-…
|
CWE-295
Improper Certificate Validation
|
CVE-2026-5787
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
935
|
7.0 |
HIGH
Network
|
-
|
-
|
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods.
|
CWE-284
Improper Access Control
|
CVE-2026-5788
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
936
|
7.2 |
HIGH
Network
|
-
|
-
|
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.
|
CWE-20
Improper Input Validation
|
CVE-2026-6973
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
937
|
7.4 |
HIGH
Network
|
-
|
-
|
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricted set of unenrolled…
|
CWE-295
Improper Certificate Validation
|
CVE-2026-7821
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
938
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmware image. These credentials are identical across all devices running this firmware and cannot be changed or r…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2026-7414
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
939
|
9.8 |
CRITICAL
Network
|
-
|
-
|
The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetr…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-7415
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
940
|
5.4 |
MEDIUM
Network
|
-
|
-
|
Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activiti…
|
CWE-79
Cross-site Scripting
|
CVE-2026-36341
|
2026-05-8 03:45 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
