Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A security flaw has been discovered in Tenda F453 1.0.0.3.Check if you run itEPSS 1.04%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.14%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.09%Feb 27, 2026
- Medium6.0Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.Check if you run itEPSS 0.44%Feb 27, 2026
- High8.4Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.09%Feb 27, 2026
- Critical9.1An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potenti…Check if you run itEPSS 0.61%Feb 27, 2026
- Critical9.8A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a terminati…Check if you run itEPSS 0.83%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 2.14%Feb 27, 2026
- High7.4A vulnerability was identified in Tenda F453 1.0.0.3.Check if you run itEPSS 0.72%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.35%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.59%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.54%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.38%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- Medium6.6An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.65%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.73%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.74%Feb 27, 2026
- Critical9.8A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a le…Check if you run itEPSS 0.76%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.73%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.73%Feb 27, 2026
Sort