Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algoritCheck if you run itEPSS 0.30%Dec 9, 2025
- Medium6.8An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g.Check if you run itEPSS 0.24%Dec 9, 2025
- High7.1An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to cCheck if you run itEPSS 0.66%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in orderCheck if you run itEPSS 0.65%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in ordeCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in ordCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order toCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to chaCheck if you run itEPSS 0.65%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to cCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order toCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to cCheck if you run itEPSS 9.77%Dec 9, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JMRI.This issue affects JMRI: before 5.13.3.Check if you run itEPSS 0.22%Dec 9, 2025
- Critical9.3Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4.Check if you run itEPSS 0.39%Dec 9, 2025
- High7.5NULL Pointer Dereference vulnerability in ravynsoft ravynos.This issue affects ravynos: through 0.5.2.Check if you run itEPSS 0.43%Dec 9, 2025
- Critical10.0An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6.Check if you run itEPSS 0.57%Dec 9, 2025
- Critical9.3An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6.Check if you run itEPSS 0.33%Dec 9, 2025
- Critical10.0A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6.Check if you run itEPSS 1.06%Dec 9, 2025
- High8.6A vulnerability exists in the SecOps SOAR server.Check if you run itEPSS 0.33%Dec 9, 2025
- High7.1The Custom Admin Menu WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whiCheck if you run itEPSS 0.23%Dec 9, 2025
- Medium6.6The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authentCheck if you run itEPSS 0.45%Dec 9, 2025
- Medium5.9The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.13 does not sanitize and escape some of its settings, which could allow high privilege users such as contributor to perfoCheck if you run itEPSS 0.24%Dec 9, 2025
- Medium5.1Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links.Check if you run itEPSS 0.37%Dec 9, 2025
- High7.2The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the page URL in all versions up to, and including,Check if you run itEPSS 0.31%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avs_dai_fe_shutdown() handles the shutdown proceCheck if you run itEPSS 0.18%Dec 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully shutting down a port via the configfs inteCheck if you run itEPSS 0.65%Dec 9, 2025
Sort