2026

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupdate.cgi endpoint to

A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource availabl

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauth

A low‑privileged local attacker who gains access to the UBR service account (e.g., via SSH) can escalate privileges to o

An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an

An administrator may attempt to block all networks by specifying "\*" or "all" as the network identifier. However, these

A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint. Due to

A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevate

A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpo

A low-privileged remote attacker can exploit the ubr-logread method in wwwubr.cgi to read arbitrary files on the system.

A low-privileged remote attacker can exploit the ubr-editfile method in wwwubr.cgi, an undocumented and unused API endpo

A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /

A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the fi

A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of t

EHG2408 series switch developed by Atop Technologies has a Stack-based Buffer Overflow vulnerability, allowing unauthent

A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the

A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown p

A security flaw has been discovered in Tenda i3 1.0.0.6(2204). This vulnerability affects the function formWifiMacFilter

A vulnerability was identified in Tenda i3 1.0.0.6(2204). This affects the function formWifiMacFilterGet of the file /go

The installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is dir

A vulnerability was determined in Tenda i3 1.0.0.6(2204). Affected by this issue is the function formexeCommand of the f

Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing a

A vulnerability was found in Tenda i3 1.0.0.6(2204). Affected by this vulnerability is the function formSetAutoPing of t

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert

A flaw has been found in Tenda i3 1.0.0.6(2204). This impacts the function formSetCfm of the file /goform/setcfm. This m

A vulnerability was detected in Comfast CF-AC100 2.6.0.8. This affects the function sub_44AC14 of the file /cgi-bin/mbox

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is th

A weakness has been identified in Qi-ANXIN QAX Virus Removal up to 2025-10-22. The affected element is the function ZwTe

Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.

Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability.

A security flaw has been discovered in doramart DoraCMS 3.0.x. Impacted is the function createFileBypath of the file /Do

A vulnerability was identified in doramart DoraCMS 3.0.x. This issue affects some unknown processing of the file /api/v1

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file pur

A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown fun

A vulnerability was detected in Bytedesk up to 1.3.9. Affected is the function getModels of the file source-code/src/mai

A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file sour

A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase

A security flaw has been discovered in EasyCMS up to 1.6. The impacted element is an unknown function of the file /Rbacu

A vulnerability was identified in EasyCMS up to 1.6. The affected element is an unknown function of the file /RbacnodeAc

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknow

A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This ma

A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /gof

A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrl

A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of t

A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an

A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the

A vulnerability was determined in SourceCodester Client Database Management System 1.0. The impacted element is an unkno

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown f