Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the mimetypes parameter to /cgi-bin/proxypolicy.cgi.Check if you run itEPSS 0.14%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/xtaccess.cgi.Check if you run itEPSS 0.14%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/vpnfw.cgi.Check if you run itEPSS 0.14%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/zonefw.cgi.Check if you run itEPSS 0.14%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/outgoingfw.cgi.Check if you run itEPSS 0.14%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/incoming.cgi.Check if you run itEPSS 0.21%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/snat.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/dnat.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the dscp parameter to /manage/qos/rules/.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the name parameter to /manage/qos/classes/.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dhcp/fixed_leases/.Check if you run itEPSS 0.21%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/uplinkeditor.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dnsmasq/hosts/.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium5.1Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/routing.cgi.Check if you run itEPSS 0.18%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi.Check if you run itEPSS 1.27%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi.Check if you run itEPSS 1.49%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi.Check if you run itEPSS 1.49%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi.Check if you run itEPSS 1.24%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_firewall.cgi.Check if you run itEPSS 1.27%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi.Check if you run itEPSS 1.29%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi.Check if you run itEPSS 1.29%Apr 2, 2026
- High7.1Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi.Check if you run itEPSS 0.65%Apr 2, 2026
- Medium5.3A security vulnerability has been detected in Textpattern up to 4.9.1.Check if you run itEPSS 0.34%Apr 2, 2026
- High8.7phpMyFAQ is an open source FAQ web application.Check if you run itEPSS 0.70%Apr 2, 2026
Sort