Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-47816 1 Thecus 1 N4800eco Nas Server Control Panel 2026-01-19 8.8 High
Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands with administrative privileges.
CVE-2021-34111 1 Thecus 2 N4800eco, N4800eco Firmware 2024-11-21 9.8 Critical
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php.