Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.64%Dec 9, 2025
- High8.6A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.39%Dec 9, 2025
- High8.6A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.52%Dec 9, 2025
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.43%Dec 9, 2025
- High8.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.51%Dec 9, 2025
- Medium5.3An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.Check if you run itEPSS 0.37%Dec 9, 2025
- High7.5An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP.Check if you run itEPSS 0.58%Dec 9, 2025
- High8.4Clone for Windows provided by ELECOM CO.,LTD.Check if you run itEPSS 0.15%Dec 9, 2025
- Medium4.8Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory.Check if you run itEPSS 0.14%Dec 9, 2025
- Medium4.3A low privileged remote attacker can use the ssh feature to execute commands directly after login.Check if you run itEPSS 0.52%Dec 9, 2025
- Medium4.6An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the fileCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium6.5A low privileged remote attacker can run the webshell with an empty command containing whitespace.Check if you run itEPSS 0.48%Dec 9, 2025
- Medium6.8A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algoritCheck if you run itEPSS 0.30%Dec 9, 2025
- Medium6.8An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g.Check if you run itEPSS 0.24%Dec 9, 2025
- High7.1An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to cCheck if you run itEPSS 0.66%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in orderCheck if you run itEPSS 0.65%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in ordeCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in ordCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order toCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to chaCheck if you run itEPSS 0.65%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to cCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order toCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to cCheck if you run itEPSS 9.77%Dec 9, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JMRI.This issue affects JMRI: before 5.13.3.Check if you run itEPSS 0.22%Dec 9, 2025
- Critical9.3Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4.Check if you run itEPSS 0.39%Dec 9, 2025
Sort