https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:59:59.036235+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03384 bdu:2022-03384 2026-10-02T10:59:59.118484+00:00 bdu:2022-03384 https://cve.radiocsirt.org/vuln/cnvd-2022-77063 cnvd-2022-77063 2026-10-02T10:59:59.118521+00:00 cnvd-2022-77063 https://cve.radiocsirt.org/vuln/euvd-2026-179102 EUVD-2026-179102 2026-10-02T10:59:59.118537+00:00 EUVD-2026-179102 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31482 fkie_cve-2022-31482 2026-10-02T10:59:59.118549+00:00

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless.

 https://cve.radiocsirt.org/vuln/ghsa-4qf2-7m52-qfp8 GHSA-4qf2-7m52-qfp8 2026-10-02T10:59:59.118582+00:00

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29. The overflowed data leads to segmentation fault and ultimately a denial-of-service condition, causing the device to reboot. The impact of this vulnerability is that an unauthenticated attacker could leverage this flaw to cause the target device to become unresponsive. An attacker could automate this attack to achieve persistent DoS, effectively rendering the target controller useless.

 https://cve.radiocsirt.org/vuln/gsd-2022-31482 gsd-2022-31482 2026-10-02T10:59:59.118600+00:00 gsd-2022-31482 https://cve.radiocsirt.org/vuln/icsa-22-153-01 ICSA-22-153-01 — Carrier LenelS2 HID Mercury access panels 2026-10-02T10:59:59.118610+00:00

An unauthenticated attacker can update the hostname with a specially crafted name, allowing shell command execution during the core collection process.CVE-2022-31479 has been assigned to this vulnerability. A CVSS v3 base score of 9.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a denial-of-service condition.CVE-2022-31480 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer.CVE-2022-31481 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer.CVE-2022-31482 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). An authenticated attacker can manipulate a filename to achieve the ability to upload the desired file anywhere on the filesystem.CVE-2022-31483 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:…