Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate p…Apr 18, 2026
- High8.8Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resultin…Apr 17, 2026
- Medium6.7A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.EPSS 0.2%Apr 17, 2026
- Critical9.8In JetBrains Junie before 252.549.29 command execution was possible via malicious project fileApr 17, 2026
- High7.3A vulnerability was found in Wavlink WL-WN530H4 20220721.Apr 17, 2026
- Medium6.7Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Apr 17, 2026
- High7.2Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Apr 17, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…EPSS 5.6%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityEPSS 10.4%Apr 15, 2026
- Critical9.8Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality.Apr 15, 2026
- High8.6Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.Apr 15, 2026
- High8.6LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling.Apr 15, 2026
- High7.3Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling.Apr 15, 2026
- High8.0A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system.Apr 15, 2026
- High8.3Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function…Apr 15, 2026
- High8.4Command injection in the connect function in NietThijmen ShoppingCart 0.0.2 allows an attacker to execute arbitrary shell commands and achieve remote code execution vi…EPSS 0.6%Apr 15, 2026
- Medium6.5Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose…Apr 14, 2026
- High7.8Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.EPSS 0.5%Apr 14, 2026
- High7.0Mitgation of CVE-2026-4519 was incomplete.Apr 13, 2026
- Low1.9A vulnerability was determined in aandrew-me ytDownloader up to 3.20.2.Apr 13, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Apr 13, 2026
- Medium5.5A flaw has been found in Totolink N300RH 6.1c.1353_B20190305.Apr 13, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Apr 13, 2026
- High8.9A weakness has been identified in Totolink A7100RU 7.4cu.2313.Apr 13, 2026
- High8.9A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024.Apr 13, 2026