Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations.EPSS 0.2%Oct 15, 2026
- High8.2The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication.EPSS 0.6%Oct 15, 2026
- High8.8The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled.EPSS 0.4%Oct 15, 2026
- Critical9.1The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not cons…EPSS 0.9%Oct 15, 2026
- High7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.EPSS 0.6%Oct 15, 2026
- High7.0Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as explo…EPSS 0.2%Oct 15, 2026
- Medium5.3ZoneMinder is a free, open source closed-circuit television software application.EPSS 0.4%Oct 15, 2026
- High8.8DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment EndpointEPSS 0.5%Oct 15, 2026
- High7.2SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in CommentEPSS 0.3%Oct 15, 2026
- Medium6.4Name Directory <= 1.34.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'dir' Shortcode AttributeEPSS 0.2%Oct 15, 2026
- Medium5.4The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5.EPSS 0.2%Oct 15, 2026
- Medium6.4Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network SettingEPSS 0.2%Oct 15, 2026
- Medium6.5A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon.EPSS 0.2%Oct 15, 2026
- Critical9.1An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon.EPSS 0.4%Oct 15, 2026
- High8.2SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or auto…EPSS 0.3%Oct 15, 2026
- Low2.3Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote attackers to inject script via…EPSS 0.5%Oct 15, 2026
- Medium4.8Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward p…EPSS 0.4%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and c…EPSS 0.9%Oct 15, 2026
- Medium6.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a fi…EPSS 0.8%Oct 15, 2026
- High8.6pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privil…EPSS 6.4%Oct 15, 2026
- Medium5.1Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver:…EPSS 0.8%Oct 15, 2026
- Medium5.1Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lis…EPSS 0.8%Oct 15, 2026
- High8.6pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute co…EPSS 6.5%Oct 15, 2026
- Low2.3Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute comm…EPSS 2.7%Oct 15, 2026
- High7.7pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute c…EPSS 5.4%Oct 15, 2026