Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3A vulnerability was determined in D-Link DIR-868L 2.01b05.Oct 14, 2026
- Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Oct 14, 2026
- Critical9.8Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.EPSS 0.7%Oct 13, 2026
- High8.8Microsoft Office OneNote Remote Code Execution VulnerabilityEPSS 0.8%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityKEVEPSS 1.5%Oct 13, 2026
- High8.6A security flaw has been discovered in Linksys E1700 1.0.0.4.003.EPSS 2.2%Oct 12, 2026
- Critical9.4OpenSpug File Transfer transfer os command injectionEPSS 1.7%Oct 11, 2026
- High8.5An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API.EPSS 0.1%Oct 8, 2026
- Critical9.3Ahsay AhsayCBS Command Injection VulnerabilityKEVEPSS 1.8%Oct 4, 2026
- High8.8D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint.EPSS 1.3%Sep 25, 2026
- High8.6Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityEPSS 0.5%Sep 17, 2026
- Medium6.1Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Sep 17, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.EPSS 0.8%Sep 3, 2026
- Critical9.8Progress LoadMaster Command Injection VulnerabilityKEVEPSS 77.4%Jun 4, 2026
- Critical9.8A command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 f…EPSS 1.8%May 28, 2026
- Critical9.8A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR61…EPSS 1.8%May 28, 2026
- Critical9.8A command injection vulnerability exists in the Admin Access feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR61…EPSS 1.8%May 28, 2026
- Critical9.1Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface.EPSS 1.6%May 21, 2026
- Low1.3A vulnerability has been found in vercel ai up to 3.0.97.EPSS 7.0%May 17, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- High7.8Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.EPSS 0.5%Apr 14, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityKEVEPSS 18.1%Feb 25, 2026
- Medium6.5TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.EPSS 1.1%Dec 15, 2025
- Medium6.5TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.EPSS 1.1%Dec 15, 2025
- Low2.0A security vulnerability has been detected in DedeBIZ up to 6.5.9.EPSS 7.3%Dec 14, 2025
67 records · page 1 of 3
PreviousNext