Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific API route to execute arbitrary OS commands.Check if you run itEPSS 0.51%Dec 24, 2025
- Critical9.1Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.Check if you run itEPSS 2.62%Dec 24, 2025
- Medium5.5Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.Check if you run itEPSS 0.20%Dec 24, 2025
- Medium6.5Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.Check if you run itEPSS 0.22%Dec 24, 2025
- High7.1LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified 'suffix' and 'fileCheck if you run itEPSS 1.13%Dec 24, 2025
- High8.7LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings.Check if you run itEPSS 0.41%Dec 24, 2025
- High7.1VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers to access arbitrary system files through unvalidated 'Check if you run itEPSS 0.65%Dec 24, 2025
- High8.7VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges.Check if you run itEPSS 0.44%Dec 24, 2025
- Medium5.1KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation.Check if you run itEPSS 0.32%Dec 24, 2025
- High7.1KYOCERA Net Admin 3.4.0906 contains an XML External Entity (XXE) injection vulnerability in the Multi-Set Template Editor that allows unauthenticated attackers to read arbitrary syCheck if you run itEPSS 0.90%Dec 24, 2025
- Medium5.1Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.Check if you run itEPSS 0.18%Dec 24, 2025
- Medium6.9Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'.Check if you run itEPSS 0.33%Dec 24, 2025
- Medium5.1Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.16%Dec 24, 2025
- High8.7devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script.Check if you run itEPSS 0.42%Dec 24, 2025
- High8.7Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.47%Dec 24, 2025
- Medium5.1Beward N100 H.264 VGA IP Camera M2.1.6 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validationCheck if you run itEPSS 0.16%Dec 24, 2025
- High7.1Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameteCheck this weekEPSS 18.76%Dec 24, 2025
- High8.5Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings.Check if you run itEPSS 0.24%Dec 24, 2025
- Medium5.1Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.26%Dec 24, 2025
- High8.7FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts.Check if you run itEPSS 2.61%Dec 24, 2025
- Medium5.1FaceSentry Access Control System 6.4.8 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.24%Dec 24, 2025
- Critical9.8FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account.Check if you run itEPSS 0.73%Dec 24, 2025
- High8.7Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams.Check if you run itEPSS 0.46%Dec 24, 2025
- High8.7V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object referenceCheck if you run itEPSS 0.40%Dec 24, 2025
- Medium5.1V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.17%Dec 24, 2025
Sort