Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter.Check if you run itEPSS 0.36%Dec 24, 2025
- High8.7iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams.Check if you run itEPSS 0.45%Dec 24, 2025
- High8.8Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages by disabling JavaScript.Check if you run itEPSS 0.48%Dec 24, 2025
- Medium5.1SmartHouse Webapp 6.5.33 contains multiple cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform unauthorized actions.Check if you run itEPSS 0.17%Dec 24, 2025
- Medium5.1AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent.Check if you run itEPSS 0.21%Dec 24, 2025
- Medium5.1Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.Check if you run itEPSS 0.20%Dec 24, 2025
- Medium5.1Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation.Check if you run itEPSS 0.20%Dec 24, 2025
- High8.5GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption.Check if you run itEPSS 0.39%Dec 24, 2025
- Medium5.1Ecessa Edge EV150 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication.Check if you run itEPSS 0.16%Dec 24, 2025
- Medium5.1Ecessa WANWorx WVR-30 versions before 10.7.4 contain a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation.Check if you run itEPSS 0.14%Dec 24, 2025
- Medium5.1Ecessa ShieldLink SL175EHQ 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication.Check if you run itEPSS 0.16%Dec 24, 2025
- Medium5.1Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.22%Dec 24, 2025
- High8.7Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify syCheck if you run itEPSS 0.78%Dec 24, 2025
- Critical9.3Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations.Check if you run itEPSS 0.39%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes.Check if you run itEPSS 0.49%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files.Check if you run itEPSS 0.47%Dec 24, 2025
- High8.7Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete aCheck if you run itEPSS 0.48%Dec 24, 2025
- High8.7Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user.Check if you run itEPSS 0.60%Dec 24, 2025
- High7.1NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings.Check if you run itEPSS 0.43%Dec 24, 2025
- High8.7FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.47%Dec 24, 2025
- Critical9.3FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authoCheck if you run itEPSS 0.33%Dec 24, 2025
- High8.7FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.53%Dec 24, 2025
- Critical9.3FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations.Check if you run itEPSS 0.62%Dec 24, 2025
- High8.7FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files.Check if you run itEPSS 0.50%Dec 24, 2025
- High8.7FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.51%Dec 24, 2025
Sort