Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7.Check if you run itEPSS 0.21%May 29, 2026
- High7.1An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform).Check if you run itEPSS 0.20%May 29, 2026
- Critical9.9A path traversal vulnerability exists in the campaign import feature of Mautic 7.Check if you run itEPSS 0.58%May 29, 2026
- High7.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in ver…Check if you run itEPSS 0.51%May 29, 2026
- High7.5Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with acce…Check if you run itEPSS 0.15%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High7.5Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX H…Check if you run itEPSS 0.12%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version…Check if you run itEPSS 0.41%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- High8.7Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows r…Check if you run itEPSS 0.43%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- High8.8Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that a…Check if you run itEPSS 0.44%May 29, 2026
- High8.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- Critical9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine.Check if you run itEPSS 0.57%May 29, 2026
- Medium6.4A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component.Check if you run itEPSS 0.15%May 29, 2026
- Critical10.0The upload.cgi binary, responsible for processing device backups, contains a hardcoded AES encryption key.Check if you run itEPSS 0.26%May 29, 2026
- High7.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.45%May 29, 2026
- Medium6.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.40%May 29, 2026
Sort