Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-4770

DOM-Based XSS in TR7's WAF-ASP

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Waf-asp
CVE-2026-4772

Stored XSS in TR7's WAF-ASP

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Waf-asp
CVE-2026-4767

Improper Access Control in TR7's WAF-ASP

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Waf-asp