Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameteCheck this weekEPSS 18.76%Dec 24, 2025
- High8.5Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings.Check if you run itEPSS 0.24%Dec 24, 2025
- Medium5.1Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.26%Dec 24, 2025
- High8.7FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts.Check if you run itEPSS 2.61%Dec 24, 2025
- Medium5.1FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.24%Dec 24, 2025
- Critical9.8FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account.Check if you run itEPSS 0.73%Dec 24, 2025
- High8.7Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams.Check if you run itEPSS 0.46%Dec 24, 2025
- High8.7V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object referenceCheck if you run itEPSS 0.40%Dec 24, 2025
- Medium5.1V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.17%Dec 24, 2025
- High8.7V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter.Check if you run itEPSS 0.36%Dec 24, 2025
- High8.7iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams.Check if you run itEPSS 0.45%Dec 24, 2025
- High8.8Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages by disabling JavaScript.Check if you run itEPSS 0.48%Dec 24, 2025
- Medium5.1SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions.Check if you run itEPSS 0.17%Dec 24, 2025
- Medium5.1AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent.Check if you run itEPSS 0.21%Dec 24, 2025
- Medium5.1Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.Check if you run itEPSS 0.20%Dec 24, 2025
- Medium5.1Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.Check if you run itEPSS 0.20%Dec 24, 2025
- High8.5GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption.Check if you run itEPSS 0.39%Dec 24, 2025
- Medium5.1Ecessa Edge EV150 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication.Check if you run itEPSS 0.16%Dec 24, 2025
- Medium5.1Ecessa WANWorx WVR-30 versions before 10.7.4 contain a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation.Check if you run itEPSS 0.14%Dec 24, 2025
- Medium5.1Ecessa ShieldLink SL175EHQ 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication.Check if you run itEPSS 0.16%Dec 24, 2025
- Medium5.1Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.22%Dec 24, 2025
- High8.7Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify syCheck if you run itEPSS 0.78%Dec 24, 2025
- Critical9.3Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations.Check if you run itEPSS 0.39%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes.Check if you run itEPSS 0.49%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files.Check if you run itEPSS 0.47%Dec 24, 2025
Sort