Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (11 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-35075 2 Mbs, Mbs-solutions 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more 2026-06-08 9.8 Critical
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
CVE-2026-35076 2 Mbs, Mbs-solutions 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more 2026-06-08 8.1 High
The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
CVE-2026-35077 2 Mbs, Mbs-solutions 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more 2026-06-08 8.1 High
The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
CVE-2026-35078 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.1 High
The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
CVE-2026-35079 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.1 High
The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
CVE-2026-35080 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.1 High
The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.
CVE-2026-35081 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.1 High
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.
CVE-2026-35082 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.8 High
The ugw-logread method allows a remote attacker with user privileges to access arbitrary local files due to insufficient validation of user-supplied input.
CVE-2026-35083 2 Mbs, Mbs-solutions 37 Double A Profibus Firmware, Double A X Link Firmware, Double X Can Firmware and 34 more 2026-06-08 8.8 High
A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.
CVE-2026-35084 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.8 High
A remote attacker with user privileges can exploit a stack buffer overflow in dali-devconfig to gain full system access as root.
CVE-2026-35085 2 Mbs, Mbs-solutions 55 Double-a Profibus, Double-a X-link, Double-x Can and 52 more 2026-06-08 8.8 High
A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.