🛡️ CVE Intelligence Center
Common Vulnerabilities & Exposures — Security Intelligence Database
| CVE ID | Severity | CVSS | Description | Status | Published |
|---|---|---|---|---|---|
| CVE-2026-34822 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the new_cert_name parameter to /man…
|
— | Apr 2, 2026 |
| CVE-2026-34821 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/vpn…
|
— | Apr 2, 2026 |
| CVE-2026-34820 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/ips…
|
— | Apr 2, 2026 |
| CVE-2026-34819 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the REMARK parameter to /cgi-bin/op…
|
— | Apr 2, 2026 |
| CVE-2026-34818 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dns…
|
— | Apr 2, 2026 |
| CVE-2026-34817 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the ADDRESS BCC parameter to /cgi-b…
|
— | Apr 2, 2026 |
| CVE-2026-34816 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the domain parameter to /manage/smt…
|
— | Apr 2, 2026 |
| CVE-2026-34815 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the DOMAIN parameter to /cgi-bin/sm…
|
— | Apr 2, 2026 |
| CVE-2026-34811 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/xt…
|
— | Apr 2, 2026 |
| CVE-2026-34800 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the NAME parameter to /cgi-bin/upli…
|
— | Apr 2, 2026 |
| CVE-2026-34810 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/vp…
|
— | Apr 2, 2026 |
| CVE-2026-34809 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/zo…
|
— | Apr 2, 2026 |
| CVE-2026-34806 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/sn…
|
— | Apr 2, 2026 |
| CVE-2026-34799 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/dns…
|
— | Apr 2, 2026 |
| CVE-2026-34814 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the group parameter to /cgi-bin/pro…
|
— | Apr 2, 2026 |
| CVE-2026-34807 | Medium | 6.4 |
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/in…
|
— | Apr 2, 2026 |
| CVE-2026-0688 | Medium | 6.4 |
The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5…
|
— | Apr 2, 2026 |
| CVE-2026-5327 | Medium | 6.3 |
A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affected element is the function h…
|
— | Apr 2, 2026 |
| CVE-2026-5328 | Medium | 6.3 |
A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted e…
|
— | Apr 2, 2026 |
| CVE-2026-5344 | Medium | 6.3 |
A security vulnerability has been detected in Textpattern up to 4.9.1. Affected by this vulnerability is the function mt…
|
— | Apr 2, 2026 |