Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify syCheck if you run itEPSS 0.78%Dec 24, 2025
- Critical9.3Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations.Check if you run itEPSS 0.39%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes.Check if you run itEPSS 0.49%Dec 24, 2025
- High7.1Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files.Check if you run itEPSS 0.47%Dec 24, 2025
- High8.7Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete aCheck if you run itEPSS 0.48%Dec 24, 2025
- High8.7Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user.Check if you run itEPSS 0.60%Dec 24, 2025
- High7.1NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings.Check if you run itEPSS 0.43%Dec 24, 2025
- High8.7FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.47%Dec 24, 2025
- Critical9.3FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementation that allows attackers to bypass authentication and authoCheck if you run itEPSS 0.33%Dec 24, 2025
- High8.7FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.53%Dec 24, 2025
- Critical9.3FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations.Check if you run itEPSS 0.62%Dec 24, 2025
- High8.7FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files.Check if you run itEPSS 0.50%Dec 24, 2025
- High8.7FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials.Check if you run itEPSS 0.51%Dec 24, 2025
- Critical9.3Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields.Check if you run itEPSS 0.70%Dec 24, 2025
- Critical9.3Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounCheck if you run itEPSS 0.64%Dec 24, 2025
- Medium5.1Synaccess netBooter NP-0801DU 7.4 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.17%Dec 24, 2025
- Medium5.1Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality.Check if you run itEPSS 0.28%Dec 24, 2025
- Medium6.8Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted databaseCheck if you run itEPSS 0.15%Dec 24, 2025
- High7.1SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials.Check if you run itEPSS 0.37%Dec 24, 2025
- Critical9.3SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through unvalidated POST parameters.Check if you run itEPSS 0.41%Dec 24, 2025
- Medium5.1SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation.Check if you run itEPSS 0.23%Dec 24, 2025
- Medium6.2IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user.Check if you run itEPSS 0.10%Dec 24, 2025
- High7.2A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS.Check if you run itEPSS 0.21%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg() The variable tpgt in usbg_make_tpg() is defined as unsigned lCheck if you run itEPSS 0.20%Dec 24, 2025
- None0.0This CVE id was assigned but later discarded.Check if you run itEPSS 0.00%Dec 24, 2025
Sort