Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability was found in Tenda F453 1.0.0.3.Check if you run itEPSS 0.86%Feb 27, 2026
- High8.3CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Builder module.Check if you run itEPSS 0.42%Feb 27, 2026
- High8.3CleverTap Web SDK version 1.15.2 and earlier is vulnerable to Cross-Site Scripting (XSS) via window.postMessage.Check if you run itEPSS 0.21%Feb 27, 2026
- High8.7PublicCMS v5.202506.d and earlier is vulnerable to stored XSS.Check if you run itEPSS 0.40%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.54%Feb 26, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.59%Feb 26, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.35%Feb 26, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.40%Feb 26, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.59%Feb 26, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.65%Feb 26, 2026
- High8.4An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with thCheck if you run itEPSS 0.14%Feb 26, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 26, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.36%Feb 26, 2026
- High8.2Apache::SessionX versions through 2.01 for Perl create insecure session id.Check if you run itEPSS 0.23%Feb 26, 2026
- Medium5.3A vulnerability has been found in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.41%Feb 26, 2026
- Medium5.3A flaw has been found in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.64%Feb 26, 2026
- High7.5Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes().Check if you run itEPSS 0.34%Feb 26, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.54%Feb 26, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.59%Feb 26, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.35%Feb 26, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.37%Feb 26, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.55%Feb 26, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.75%Feb 26, 2026
- Medium5.3A vulnerability was detected in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.27%Feb 26, 2026
- High8.7osctrl is an osquery management solution.Check if you run itEPSS 0.27%Feb 26, 2026
Sort