Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1.Mar 24, 2026
- High8.6A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826.Mar 23, 2026
- Low2.0A weakness has been identified in kalcaddle kodbox 1.64.Mar 23, 2026
- High8.9A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0.Mar 23, 2026
- High7.4A flaw has been found in Linksys MR9600 2.0.6.206937.Mar 22, 2026
- Low2.1A security flaw has been discovered in Tenda F453 1.0.0.3.Mar 22, 2026
- Low2.1A vulnerability was found in Wavlink WL-WN578W2 221110.Mar 22, 2026
- Low2.0A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017.Mar 22, 2026
- Medium5.8OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper that allows attackers to execute hidden commands by inje…Mar 21, 2026
- Medium5.5A vulnerability was determined in D-Link DIR-820LW 2.03.Mar 20, 2026
- Medium5.5A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227.Mar 20, 2026
- Low1.9A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880.Mar 20, 2026
- High7.3A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and con…EPSS 2.0%Mar 20, 2026
- Low2.0A vulnerability was determined in Comfast CF-AC100 2.6.0.8.Mar 20, 2026
- Low2.0A vulnerability was found in Comfast CF-AC100 2.6.0.8.Mar 20, 2026
- Low2.0A vulnerability has been found in Comfast CF-AC100 2.6.0.8.Mar 20, 2026
- Low2.1A flaw has been found in D-Link DIR-513 1.10.Mar 20, 2026
- Critical9.8Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.Mar 19, 2026
- High8.6SQLBot is an intelligent data query system based on a large language model and RAG.Mar 19, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Mar 19, 2026
- Medium5.3Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Mar 19, 2026
- High7.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that resul…EPSS 1.0%Mar 18, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Mar 18, 2026
- High7.5IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow…EPSS 0.4%Mar 17, 2026
- Low2.0A security flaw has been discovered in Tenda AC8 16.03.50.11.Mar 16, 2026