Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.May 14, 2026
- High8.5A vulnerability exists in BIG-IP systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can modify configuration objec…May 13, 2026
- High8.5A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP con…May 13, 2026
- High8.5When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker wi…May 13, 2026
- High7.2U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection.May 13, 2026
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- Critical9.3efw4.X is an Enterprise Framework for Web.May 12, 2026
- High7.2A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- Critical9.4An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax.May 12, 2026
- High7.2A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection.May 12, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.May 12, 2026
- Low3.3Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.May 12, 2026
- Medium6.5An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrati…May 12, 2026
- High8.2Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-…May 12, 2026
- Low2.1A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210.May 12, 2026
- Low2.1A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210.May 11, 2026