Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability via the new_cert_name parameter in the /manage/ca/certificate/ page. An authenticated attacker can inject arbitrary JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS score of 5.1. No official patch or remediation information is provided in the available data. Join the discussion | CVE Database V5 | 04/02/2026, 14:46:13 UTC Added: 04/02/2026, 15:08:35 UTC |
0 Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /manage/ipsec/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page. Join the discussion | CVE Database V5 | 04/02/2026, 14:46:11 UTC Added: 04/02/2026, 15:08:35 UTC |
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the domain parameter of the /manage/smtpscan/domainrouting/ endpoint. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS 4.0 base score of 5.1. No official patch or remediation information is provided in the available data. Join the discussion | CVE Database V5 | 04/02/2026, 14:46:08 UTC Added: 04/02/2026, 15:08:35 UTC |
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the /cgi-bin/proxyuser.cgi endpoint via the user parameter. An attacker with authenticated access can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS 4.0 base score of 5.1. No official patch or remediation information is provided in the available data. Join the discussion | CVE Database V5 | 04/02/2026, 14:46:06 UTC Added: 04/02/2026, 15:08:35 UTC |
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the remark parameter of /cgi-bin/xtaccess.cgi. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS score of 5.1. No patch or official fix information is currently provided for this issue. Join the discussion | CVE Database V5 | 04/02/2026, 14:46:05 UTC Added: 04/02/2026, 15:08:33 UTC |
0 Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark parameter to /cgi-bin/outgoingfw.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page. Join the discussion | CVE Database V5 | 04/02/2026, 14:46:01 UTC Added: 04/02/2026, 15:08:33 UTC |
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the remark parameter of /cgi-bin/dnat.cgi. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users access the affected page. This vulnerability has a medium severity with a CVSS 4.0 score of 5.1. No official patch or remediation information is provided in the available data. Join the discussion | CVE Database V5 | 04/02/2026, 14:45:59 UTC Added: 04/02/2026, 15:08:33 UTC |
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability via the dscp parameter in the /manage/qos/rules/ page. An authenticated attacker can inject malicious JavaScript code that is stored on the server and executed when other users view the affected page. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.1. No patch or official fix information is currently provided. Join the discussion | CVE Database V5 | 04/02/2026, 14:45:57 UTC Added: 04/02/2026, 15:08:33 UTC |
0 Endian Firewall version 3.3.25 and earlier contains a stored cross-site scripting (XSS) vulnerability in the name parameter of the /manage/qos/classes/ page. An authenticated attacker can inject malicious JavaScript code that is stored and executed when other users view the affected page. This vulnerability has a medium severity with a CVSS score of 5.1. No official patch or remediation information is provided in the available data. Join the discussion | CVE Database V5 | 04/02/2026, 14:45:57 UTC Added: 04/02/2026, 15:08:33 UTC |
0 Endian Firewall version 3.3.25 and prior allow stored cross-site scripting (XSS) via the remark user ham spam parameter to /cgi-bin/salearn.cgi. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page. Join the discussion | CVE Database V5 | 04/02/2026, 14:45:56 UTC Added: 04/02/2026, 15:08:30 UTC |
Showing 1 to 10 of 14 results