Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version…Check if you run itEPSS 0.41%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- High8.7Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows r…Check if you run itEPSS 0.43%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- High8.8Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that a…Check if you run itEPSS 0.44%May 29, 2026
- High8.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- Critical9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine.Check if you run itEPSS 0.57%May 29, 2026
- Medium6.4A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component.Check if you run itEPSS 0.15%May 29, 2026
- Critical10.0The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key.Check if you run itEPSS 0.26%May 29, 2026
- High7.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.45%May 29, 2026
- Medium6.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.40%May 29, 2026
- Low2.7A flaw was found in the Quay config-tool's GitLab OAuth validator.Check if you run itEPSS 0.20%May 29, 2026
- Medium5.3The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_sit…Check if you run itEPSS 0.41%May 29, 2026
- Medium5.3The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Payment Bypass via Insufficient Verification of Data Authenticity in all versions up…Check if you run itEPSS 0.20%May 29, 2026
- High8.1The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verifi…Check if you run itEPSS 0.21%May 29, 2026
- Critical10.0The acer_cgi.log file in the device firmware is accessible without authentication via the web interface.Check if you run itEPSS 0.52%May 29, 2026
- Critical10.0Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device.Check if you run itEPSS 1.34%May 29, 2026
- High8.3Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors.Check if you run itEPSS 0.21%May 29, 2026
- Critical10.0Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.Check if you run itEPSS 0.33%May 29, 2026
- High8.6The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.Check if you run itEPSS 0.37%May 29, 2026
- High8.7Unauthenticated Debug Service.Check if you run itEPSS 0.21%May 29, 2026
Sort