Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dhcp/fixed_leases/.Check if you run itEPSS 0.21%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/hosts/.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/routing.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi.Check if you run itEPSS 1.27%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi.Check if you run itEPSS 1.49%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi.Check if you run itEPSS 1.49%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi.Check if you run itEPSS 1.24%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_firewall.cgi.Check if you run itEPSS 1.27%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi.Check if you run itEPSS 1.29%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi.Check if you run itEPSS 1.29%Apr 2, 2026
- High7.1Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi.Check if you run itEPSS 0.65%Apr 2, 2026
- Medium5.3A security vulnerability has been detected in Textpattern up to 4.9.1.Check if you run itEPSS 0.34%Apr 2, 2026
- High8.7phpMyFAQ is an open source FAQ web application.Check if you run itEPSS 0.70%Apr 2, 2026
- Medium5.4phpMyFAQ is an open source FAQ web application.Check if you run itEPSS 0.27%Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Check if you run itEPSS 0.36%Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Check if you run itEPSS 0.28%Apr 2, 2026
- Critical9.3Agno: Arbitrary code execution via on inCheck if you run itEPSS 0.86%Apr 2, 2026
- Medium6.9A flaw has been found in LibRaw up to 0.22.0.Check if you run itEPSS 0.76%Apr 2, 2026
- Medium5.5A security flaw has been discovered in DefaultFuction Content-Management-System 1.0.Check if you run itEPSS 2.98%Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Check if you run itEPSS 0.36%Apr 2, 2026
- Critical9.8Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages.Patch nowKEVEPSS 58.39%Apr 2, 2026
- High8.7SzafirHost downloads necessary files in the context of the initiating web page.Check if you run itEPSS 0.20%Apr 2, 2026
- Medium5.1Szafir SDK Web is a browser plug-in that can run SzafirHost application which download the necessary files when launched.Check if you run itEPSS 0.28%Apr 2, 2026
Sort