Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Improper Input Validation vulnerability in Apache IoTDB.Check if you run itEPSS 0.67%Mar 9, 2026
- Critical9.8A vulnerability in Apache IoTDB.Check if you run itEPSS 0.59%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.23%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.23%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In nr modem, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.32%Mar 9, 2026
- High7.5In modem, there is a possible improper input validation.Check if you run itEPSS 0.59%Mar 9, 2026
- High7.5An unauthenticated remote attacker can obtain valid session tokens because they are exposed in plaintext within the URL parameters of the wwwupdate.cgi endpoint in UBR.Check if you run itEPSS 0.33%Mar 9, 2026
- High7.2A high-privileged remote attacker can fully compromise the device by abusing an update signature bypass vulnerability in the wwwupdate.cgi method in the web interface of UBR.Check if you run itEPSS 0.23%Mar 9, 2026
- High8.8A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full device compromise.Check if you run itEPSS 0.50%Mar 9, 2026
- Critical9.1Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data.Check if you run itEPSS 0.27%Mar 9, 2026
- Critical9.1Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to upload and apply arbitrary updates.Check if you run itEPSS 0.42%Mar 9, 2026
- Medium6.5A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups a…Check if you run itEPSS 0.25%Mar 9, 2026
- Medium6.2An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including pass…Check if you run itEPSS 0.08%Mar 9, 2026
- High7.8A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to obtain full system access.Check if you run itEPSS 0.17%Mar 9, 2026
- Medium4.9An administrator may attempt to block all traffic by configuring a pass filter with an empty table.Check if you run itEPSS 0.34%Mar 9, 2026
- Medium4.9An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier.Check if you run itEPSS 0.34%Mar 9, 2026
- High8.8A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint.Check if you run itEPSS 0.58%Mar 9, 2026
- High8.8A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents…Check if you run itEPSS 0.58%Mar 9, 2026
- High8.1A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to write arbitrary files on the system.Check if you run itEPSS 0.35%Mar 9, 2026
- Medium6.5A low-privileged remote attacker can exploit the ubr-logread method in wwwubr.cgi to read arbitrary files on the system.Check if you run itEPSS 0.53%Mar 9, 2026
- Medium6.5A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpoint to read arbitrary files on the system.Check if you run itEPSS 0.36%Mar 9, 2026
Sort