Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-4770

DOM-Based XSS in TR7's WAF-ASP

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Waf-asp
CVE-2026-4772

Stored XSS in TR7's WAF-ASP

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Waf-asp
CVE-2026-4767

Improper Access Control in TR7's WAF-ASP

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Waf-asp
CVE-2024-8781

Container Escape Vulnerability in TR7's Application Security Platform (ASP)

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform (ASP) allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform (ASP): v1.4.25.188.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Tr7cyberdefense
Products
Asp