Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
- Critical9.8An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi.Apr 23, 2026
- High8.8Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Apr 23, 2026
- Critical9.8IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal us…Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Apr 23, 2026
- High8.4radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by cra…Apr 22, 2026
- Critical9.3WWBN AVideo is an open source video platform.Apr 22, 2026
- Critical9.9Flowise is a drag & drop user interface to build a customized large language model flow.Apr 21, 2026
- Critical9.4This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.EPSS 1.3%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Apr 21, 2026
- High8.6FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are p…Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface.Apr 21, 2026
- Critical9.3NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.Apr 21, 2026
- Critical9.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability.Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability.EPSS 1.2%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Apr 20, 2026
- High8.7ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability.Apr 20, 2026
- Critical9.4A command injection vulnerability was found in the PPTP VPN Clients on the ADM.Apr 20, 2026
- High8.8Emissary is a P2P based data-driven workflow engine.Apr 18, 2026
- High8.5radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command seq…Apr 17, 2026
- Medium6.3xrdp is an open source RDP server.Apr 17, 2026
- Critical9.4Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Apr 17, 2026