Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execution on the system…Check if you run itEPSS 3.69%Feb 27, 2026
- High7.2An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.81%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.55%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- Critical9.8An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achiev…Check if you run itEPSS 0.69%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.70%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.71%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.70%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by…Check if you run itEPSS 1.71%Feb 27, 2026
- Medium6.5Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact.Check if you run itEPSS 0.37%Feb 27, 2026
- High7.4A vulnerability was determined in Tenda F453 1.0.0.3.Check if you run itEPSS 0.82%Feb 27, 2026
- High7.4A vulnerability was found in Tenda F453 1.0.0.3.Check if you run itEPSS 0.86%Feb 27, 2026
- Low2.1A vulnerability has been found in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.41%Feb 27, 2026
- Low2.1A flaw has been found in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.64%Feb 27, 2026
- High7.5Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes().Check if you run itEPSS 0.34%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.60%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.59%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.36%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.59%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.75%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.36%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.54%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.54%Feb 27, 2026
Sort