Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts thCheck if you run itEPSS 0.46%Feb 19, 2026
- Medium5.3Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint.Check if you run itEPSS 0.39%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint.Check if you run itEPSS 0.46%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat endpoinCheck if you run itEPSS 0.46%Feb 19, 2026
- Medium5.3Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoiCheck if you run itEPSS 0.41%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSESCheck if you run itEPSS 0.40%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the protocol parCheck if you run itEPSS 0.46%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through the deviceCheck if you run itEPSS 0.40%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspot_Check if you run itEPSS 0.44%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameteCheck if you run itEPSS 0.44%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the ID parameteCheck if you run itEPSS 0.44%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input through the NTPCheck if you run itEPSS 0.38%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the GATEWAY_GREEN parameter.Check if you run itEPSS 0.40%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and destination parameters.Check if you run itEPSS 0.39%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destination parameter.Check if you run itEPSS 0.39%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the netmask_addrCheck if you run itEPSS 0.39%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedCheck if you run itEPSS 0.46%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the organization parameter.Check if you run itEPSS 0.39%Feb 19, 2026
- Medium5.3Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the newLicense paraCheck if you run itEPSS 0.34%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input throughCheck if you run itEPSS 0.35%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the cCheck if you run itEPSS 0.34%Feb 19, 2026
- Medium5.1Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input toCheck if you run itEPSS 0.44%Feb 19, 2026
- Medium5.3Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server.Check if you run itEPSS 0.30%Feb 19, 2026
- Medium6.1The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering.Check if you run itEPSS 0.19%Feb 19, 2026
- Critical9.1A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location within the deployment via a system REST API.Check if you run itEPSS 0.77%Feb 19, 2026
Sort