Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell.Check if you run itEPSS 1.11%May 1, 2025
- Medium5.3An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.Check if you run itEPSS 0.13%May 1, 2025
- High7.3An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.19%May 1, 2025
- High7.3An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.Check if you run itEPSS 0.19%May 1, 2025
- High7.1An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.17%May 1, 2025
- Medium4.0An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.15%May 1, 2025
- Medium6.5An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.23%May 1, 2025
- Medium4.3An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.Check if you run itEPSS 0.16%May 1, 2025
- None0.0DO NOT USE THIS CANDIDATE NUMBER.Open the advisoryMay 1, 2025
- Medium5.3An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.09%May 1, 2025
- Medium4.3An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.Check if you run itEPSS 0.16%May 1, 2025
- High7.5Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.Check if you run itEPSS 0.44%May 1, 2025
- Medium6.1Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.Check if you run itEPSS 0.28%May 1, 2025
- Critical9.1Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.Check if you run itEPSS 0.44%May 1, 2025
- High8.7A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical.Check if you run itEPSS 1.20%Apr 30, 2025
- High8.7A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94.Check if you run itEPSS 1.16%Apr 30, 2025
- Medium4.1Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.Check if you run itEPSS 0.21%Apr 30, 2025
- Medium6.5Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.Check if you run itEPSS 0.26%Apr 30, 2025
- Medium6.3Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.Check if you run itEPSS 0.25%Apr 30, 2025
- Medium5.3Insufficient default configuration in HCL Leap allows anonymous access to directory information.Check if you run itEPSS 0.31%Apr 30, 2025
- High7.1Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.Check if you run itEPSS 0.24%Apr 30, 2025
Sort