dbcve.org
Vulnerability index

Browse CVEs

7 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Tcis 3 Firmware CRITICAL 9.8
CVE-2025-59818

This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.

Fix: 9.2.3.3+
Fix from $2,300 2026-02-04
Icx500 Firmware CRITICAL 9.8
CVE-2025-64093

Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.

Fix: 1.4.3.3+
Fix from $2,300 2026-01-09
Tcis 3 Firmware HIGH 8.8
CVE-2025-64090

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

Fix: 9.2.3.3+
Fix from $1,950 2026-01-09
Tcis 3 Firmware HIGH 8.8
CVE-2025-64091

This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.

Fix: 9.2.3.3+
Fix from $1,950 2026-01-09
Icx500 Firmware HIGH 7.5
CVE-2025-64092

This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.

Fix: 1.4.3.3+
Fix from $1,950 2026-01-09
Alphacom Xe Audio Server HIGH 8.8
CVE-2021-40845

The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section a…

Fix: after 11.2.3.10
Fix from $1,950 2021-09-15
Ip Stationweb Firmware MEDIUM 6.1
CVE-2018-19926

Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.

Fix: 4.2.3.9+
Fix from $1,600 2018-12-06