Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (25 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-71453 1 Johnson Controls 1 Easyio Fs32 2026-10-02 N/A
- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-71448 1 Johnson Controls 1 Easyio Fs32 2026-10-02 N/A
: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-64893 1 Johnson Controls 1 Easyio Neo 2026-10-02 N/A
- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25.
CVE-2026-64892 1 Johnson Controls 1 Easy Io Neo 2026-10-02 N/A
- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63.
CVE-2026-34494 1 Johnson Controls 1 Neo Series Mvp2 2026-10-02 N/A
- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63.
CVE-2026-34493 1 Johnson Controls 1 Easyio Fs32 2026-10-02 N/A
- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63.
CVE-2026-71449 1 Johnson Controls 1 Easyio Fs32 2026-10-01 N/A
: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-71452 1 Johnson Controls 1 Easyio Fs32 2026-10-01 N/A
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-27874 1 Johnson Controls 1 Easyio Fs32 2026-10-01 N/A
: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-71451 1 Johnson Controls 1 Easyio Fs32 2026-10-01 N/A
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-27873 1 Johnson Controls 2 Easy Io Fg, Easyio Fg 2026-10-01 N/A
- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52.
CVE-2026-27872 1 Johnson Controls 1 Easy Io Fg 2026-10-01 N/A
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects Easy IO FG: before 2.0b52.
CVE-2026-64896 1 Johnson Controls 1 T2000 2026-08-27 N/A
Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects T2000: before 31.6.
CVE-2026-34491 2 Johnson Controls, Johnsoncontrols 3 Metasys 14, Metasys 15, Metasys 2026-08-25 N/A
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1.
CVE-2026-21661 2 Johnson Controls, Johnsoncontrols 2 Ac2000, Ac2000 2026-08-24 N/A
An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths. This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3.
CVE-2026-27875 2 Johnson Controls, Johnsoncontrols 2 Simplex Incident Manager Autocall Fire Administrator, Simplex Incident Manager / Autocall Fire Administrator 2026-08-21 N/A
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.
CVE-2026-64887 2 Johnson Controls, Johnsoncontrols 2 Airwall, Airwall 2026-08-17 N/A
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.
CVE-2026-34492 2 Johnson Controls, Johnsoncontrols 2 Airwall, Airwall 2026-08-17 N/A
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.
CVE-2026-27871 1 Johnson Controls 1 Tl280 2026-08-14 N/A
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63.
CVE-2026-21655 3 Johnson Control, Johnson Controls, Johnsoncontrols 4 Victor, Ccure 9000, Victor Application Server and 1 more 2026-08-06 N/A
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. This issue affects victor: before 8.0; CCure 9000: before 3.2; Victor Application Server: before 4.1.