Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A vulnerability was detected in HummerRisk up to 1.5.0.Feb 24, 2026
- Low2.1A security vulnerability has been detected in HummerRisk up to 1.5.0.Feb 24, 2026
- Low2.0A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6.Feb 23, 2026
- Low2.1A security flaw has been discovered in qinming99 dst-admin up to 1.5.0.Feb 22, 2026
- Medium5.5A flaw has been found in Vaelsys 4.1.0.Feb 22, 2026
- Medium5.5A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01.Feb 22, 2026
- Critical9.2Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.Feb 20, 2026
- High8.7Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.Feb 20, 2026
- High7.3A vulnerability was detected in UTT HiPER 520 1.7.7-160105.Feb 20, 2026
- High7.3A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105.Feb 20, 2026
- High8.1A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specia…EPSS 0.9%Feb 20, 2026
- Low2.1A flaw has been found in Comfast CF-E7 2.6.0.9.Feb 20, 2026
- Low2.1A vulnerability was detected in Comfast CF-E7 2.6.0.9.Feb 20, 2026
- High8.6OpenClaw is a personal AI assistant.Feb 20, 2026
- Medium6.5TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.EPSS 1.1%Dec 15, 2025
- Medium6.5TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.EPSS 1.1%Dec 15, 2025
- Low2.0A security vulnerability has been detected in DedeBIZ up to 6.5.9.EPSS 7.3%Dec 14, 2025
- High7.8Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.EPSS 0.4%Dec 9, 2025
- Low2.1A security flaw has been discovered in D-Link DIR-823X up to 20250416.EPSS 3.4%Dec 8, 2025
- Low2.1A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1.EPSS 1.3%Dec 7, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityKEVEPSS 1.9%Sep 19, 2025
- Critical9.8Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.8%Sep 18, 2025
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityEPSS 0.7%Jul 25, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityKEVEPSS 93.7%May 21, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityKEVEPSS 87.9%Mar 25, 2025