Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by providing maCheck if you run itEPSS 2.14%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by sending maliCheck if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying aCheck if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 2.09%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.73%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.70%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.73%Feb 27, 2026
- High8.0An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying aCheck if you run itEPSS 1.65%Feb 27, 2026
- High8.0An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.81%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.71%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.73%Feb 27, 2026
- High8.8An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting maCheck if you run itEPSS 1.70%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.35%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.54%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.59%Feb 27, 2026
- Medium6.5Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact.Check if you run itEPSS 0.37%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.38%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.55%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.60%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.36%Feb 27, 2026
- High8.7A vulnerability was determined in Tenda F453 1.0.0.3.Check if you run itEPSS 0.82%Feb 27, 2026
Sort