Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lobo: from n/a through <= 2.8.Check if you run itEPSS 0.29%Dec 9, 2025
- Medium4.3Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.29%Dec 9, 2025
- High8.7A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.Check if you run itEPSS 0.43%Dec 9, 2025
- Medium5.3A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).Check if you run itEPSS 0.28%Dec 9, 2025
- Medium6.9A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).Check if you run itEPSS 0.37%Dec 9, 2025
- Medium5.1A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).Check if you run itEPSS 0.21%Dec 9, 2025
- Critical9.2A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).Check if you run itEPSS 0.38%Dec 9, 2025
- Medium4.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4).Check if you run itEPSS 0.25%Dec 9, 2025
- Low3.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4).Check if you run itEPSS 0.10%Dec 9, 2025
- High7.5A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.64%Dec 9, 2025
- High8.6A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0)Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.3An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.Check if you run itEPSS 0.37%Dec 9, 2025
- Medium4.6An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the fileCheck if you run itEPSS 0.21%Dec 9, 2025
- Medium6.5A low privileged remote attacker can run the webshell with an empty command containing whitespace.Check if you run itEPSS 0.48%Dec 9, 2025
- Medium6.8An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g.Check if you run itEPSS 0.24%Dec 9, 2025
- High7.1An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to cCheck if you run itEPSS 0.66%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in orderCheck if you run itEPSS 0.65%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in ordeCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in ordCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order toCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to chaCheck if you run itEPSS 0.65%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to cCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order toCheck if you run itEPSS 9.77%Dec 9, 2025
- High7.1An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to cCheck if you run itEPSS 9.77%Dec 9, 2025
- Critical10.0An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6.Check if you run itEPSS 0.58%Dec 9, 2025
Sort