CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

/etc/timezone can be Arbitrarily Written

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-787Nov 1, 2025
CVSS2.3v4.0EPSS0.279%PoCs0SignalsSTIX

/etc/avahi/services/z9.service can be Arbitrarily Written

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-787Nov 1, 2025
CVSS2.3v4.0EPSS0.279%PoCs0SignalsSTIX

Denial of Service Due to SlowLoris

Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-730Nov 1, 2025
CVSS10.0v4.0EPSS0.312%PoCs0SignalsSTIX

Web UI Malfunction

Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-730Nov 1, 2025
CVSS10.0v4.0EPSS0.345%PoCs0SignalsSTIX

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-321Nov 1, 2025
CVSS10.0v4.0EPSS0.398%PoCs0SignalsSTIX

Missing Security Headers

Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-693Oct 31, 2025
CVSS6.9v4.0EPSS0.345%PoCs0SignalsSTIX

Server Certificate Verification Disabled

Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-599Oct 31, 2025
CVSS10.0v4.0EPSS0.205%PoCs0SignalsSTIX

Insufficient Password Policy

Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-521Oct 31, 2025
CVSS6.9v4.0EPSS0.319%PoCs0SignalsSTIX

Credits Page not Matching Versions in Use in the Firmware

Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-448Oct 30, 2025
CVSS2.1v4.0EPSS0.194%PoCs0SignalsSTIX

Lack of Graceful Error Handling - HTTP 5xx Error

Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-394Oct 30, 2025
CVSS10.0v4.0EPSS0.345%PoCs0SignalsSTIX

Systemic Internal Server Errors - HTTP 500 Response

Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-394Oct 30, 2025
CVSS10.0v4.0EPSS0.345%PoCs0SignalsSTIX

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-352Oct 29, 2025
CVSS10.0v4.0EPSS0.159%PoCs0SignalsSTIX

Non-Compliant TLS Configuration

Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-326Oct 29, 2025
CVSS10.0v4.0EPSS0.226%PoCs0SignalsSTIX

Server Version Disclosure

Server Version Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-306Oct 29, 2025
CVSS10.0v4.0EPSS0.324%PoCs0SignalsSTIX

Resource Lacking AuthN

Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-306Oct 29, 2025
CVSS10.0v4.0EPSS0.319%PoCs0SignalsSTIX

Local Privilege Escalation

Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-269Oct 28, 2025
CVSS10.0v4.0EPSS0.203%PoCs0SignalsSTIX

Privilege Escalation through SUID-bit Binary

Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-269Oct 28, 2025
CVSS10.0v4.0EPSS0.319%PoCs0SignalsSTIX

Denial of Service - Protocol Manipulation

Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

CWE-248Oct 28, 2025
CVSS10.0v4.0EPSS0.312%PoCs0SignalsSTIX

Vulnerable Upgrade Feature (Arbitrary File Write)

Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-22Oct 28, 2025
CVSS10.0v4.0EPSS0.452%PoCs0SignalsSTIX

Error Messages Wrapped In HTTP Header

Error Messages Wrapped In HTTP Header.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-209Oct 27, 2025
CVSS6.9v4.0EPSS0.234%PoCs0SignalsSTIX

Weak Password Policy

Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-521Oct 27, 2025
CVSS10.0v4.0EPSS0.319%PoCs0SignalsSTIX

Email Password Disclosure

Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-200Oct 27, 2025
CVSS10.0v4.0EPSS0.296%PoCs0SignalsSTIX

Missing Initial Password Change

Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-20CWE-521Oct 26, 2025
CVSS10.0v4.0EPSS0.319%PoCs0SignalsSTIX

Lack of Input Validation

Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-20CWE-79Oct 26, 2025
CVSS6.9v4.0EPSS0.182%PoCs0SignalsSTIX

Mail Configuration File Manipulation + Command Execution

Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

CWE-20Oct 26, 2025
CVSS10.0v4.0EPSS0.508%PoCs0SignalsSTIX