Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425.May 9, 2026
- Low2.1A vulnerability was identified in Wavlink NU516U1 M16U1_V240425.May 9, 2026
- Low2.1A vulnerability was determined in Wavlink NU516U1 M16U1_V240425.May 9, 2026
- Low2.1A vulnerability was found in Wavlink NU516U1 M16U1_V240425.May 9, 2026
- Low2.1A vulnerability has been found in Wavlink NU516U1 M16U1_V240425.May 9, 2026
- High7.2Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation.May 9, 2026
- Medium4.6Vim is an open source, command line text editor.May 8, 2026
- Critical9.9Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.May 8, 2026
- Medium4.4Vim is an open source, command line text editor.May 8, 2026
- Critical9.8PraisonAI is a multi-agent teams system.May 8, 2026
- Critical9.2DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attacke…EPSS 1.4%May 8, 2026
- Critical9.8OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will e…May 8, 2026
- High7.3An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209.EPSS 3.6%May 8, 2026
- Critical9.1LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's u…EPSS 7.2%May 8, 2026
- Medium6.5Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scann…EPSS 1.4%May 8, 2026
- High7.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- Critical10.0OpenLearnX is an open-source, decentralized learning and assessment platform.May 8, 2026
- Low2.1A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84.May 7, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- High8.8GitPython is a python library used to interact with Git repositories.May 7, 2026
- High8.8NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js.EPSS 1.2%May 7, 2026
- Critical9.8OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.EPSS 0.9%May 7, 2026
- High8.8OS command injection vulnerability in the traceroute diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020…May 5, 2026
- High8.8OS command injection vulnerability in the ping diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13…May 5, 2026
- Critical9.1The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRem…May 5, 2026