Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via…Check if you run itEPSS 0.22%Feb 24, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript.Check if you run itEPSS 0.21%Feb 24, 2026
- Medium5.1Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface.Check if you run itEPSS 0.12%Feb 24, 2026
- Medium5.1Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and…Check if you run itEPSS 0.17%Feb 24, 2026
- High8.6Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP respons…Check if you run itEPSS 0.20%Feb 24, 2026
- Critical9.3Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface.Check if you run itEPSS 0.36%Feb 24, 2026
- Critical9.3Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users.Check if you run itEPSS 0.42%Feb 24, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the…Check if you run itEPSS 1.39%Feb 24, 2026
- Critical9.8FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE).Patch nowKEVEPSS 5.97%Feb 24, 2026
- High8.8Privilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote authenticated users to modify administrator only settings and extract adm…Check if you run itEPSS 0.32%Feb 24, 2026
- Medium5.7Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.Check if you run itEPSS 0.10%Feb 24, 2026
- Low2.1A vulnerability was determined in exiftool up to 13.49 on macOS.Check if you run itEPSS 3.95%Feb 24, 2026
- Low2.1A vulnerability was found in Intelbras TIP 635G 1.12.3.5.Check if you run itEPSS 6.63%Feb 24, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Feb 24, 2026
- Critical9.2Actual is a local-first personal finance tool.Check if you run itEPSS 0.45%Feb 24, 2026
- Medium5.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Feb 24, 2026
- Medium4.8Payload is a free and open source headless content management system.Check if you run itEPSS 0.34%Feb 24, 2026
- High8.8MindsDB is a platform for building artificial intelligence from enterprise data.Check this weekEPSS 10.99%Feb 24, 2026
- High7.8bleon-ethical/api-gateway-deploy provides API gateway deployment.Check if you run itEPSS 0.74%Feb 24, 2026
- Medium4.9A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.9A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.9A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.49%Feb 24, 2026
- Medium4.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.Check if you run itEPSS 0.37%Feb 24, 2026
- High7.5TOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi.Check if you run itEPSS 0.37%Feb 24, 2026
- Medium6.8The CPSD CryptoPro Secure Disk application boots a small Linux operating system to perform user authentication before using BitLocker to decrypt the Windows partition.Check if you run itEPSS 0.29%Feb 24, 2026
Sort