Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.EPSS 0.4%Dec 9, 2025
- Low2.1A security flaw has been discovered in D-Link DIR-823X up to 20250416.EPSS 3.4%Dec 8, 2025
- Low2.1A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1.EPSS 1.3%Dec 7, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityKEVEPSS 1.9%Sep 19, 2025
- Critical9.8Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.8%Sep 18, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityKEVEPSS 93.7%May 21, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityKEVEPSS 87.9%Mar 25, 2025
- Medium6.9DrayTek Vigor Routers OS Command Injection VulnerabilityKEVEPSS 98.2%Dec 27, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityKEVEPSS 87.3%Dec 16, 2024
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityKEVEPSS 94.0%Dec 13, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityKEVEPSS 94.8%Nov 18, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityKEVEPSS 59.7%Oct 8, 2024
- Critical10.0Palo Alto Networks PAN-OS Command Injection VulnerabilityKEVEPSS 100.0%Apr 12, 2024
- Critical9.8D-Link Multiple NAS Devices Command Injection VulnerabilityKEVEPSS 100.0%Apr 3, 2024
- Critical9.1Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityKEVEPSS 100.0%Jan 10, 2024
- Critical9.8Vmware Aria Operations for Networks Command Injection VulnerabilityKEVEPSS 98.3%Jun 7, 2023
- High8.8TP-Link Multiple Routers Command Injection VulnerabilityKEVEPSS 41.6%Jun 6, 2023
- Critical9.8Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityKEVEPSS 87.7%May 24, 2023
- High7.2Cisco Small Business RV Series Routers Command Injection VulnerabilityKEVEPSS 54.1%Apr 13, 2023
- Critical9.8Sophos Web Appliance Command Injection VulnerabilityKEVEPSS 100.0%Apr 4, 2023
- High8.8TP-Link Archer AX-21 Command Injection VulnerabilityKEVEPSS 100.0%Mar 15, 2023
- Medium6.8Mitel MiVoice Connect Command Injection VulnerabilityKEVEPSS 10.6%Nov 21, 2022
- Critical9.8D-Link DSL-2750B Devices Command Injection VulnerabilityKEVEPSS 62.5%Oct 18, 2022
- High7.6In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file.EPSS 2.8%Apr 13, 2022
- High8.8Ivanti Pulse Connect Secure Command Injection VulnerabilityKEVEPSS 22.9%May 27, 2021