Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3A vulnerability was found in Wavlink WL-WN530H4 20220721.Apr 17, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.6%Apr 17, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.6%Apr 17, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.6%Apr 17, 2026
- High8.6An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command.EPSS 1.2%Apr 17, 2026
- High8.1sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.Apr 16, 2026
- Critical9.3The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them o…Apr 16, 2026
- High7.4radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP.Apr 16, 2026
- High8.8Composer is a dependency manager for PHP.Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Apr 15, 2026
- High8.4radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary command…Apr 15, 2026
- Medium4.0Podman is a tool for managing OCI containers and pods.Apr 14, 2026
- High8.8Chamilo LMS is an open-source learning management system.Apr 14, 2026
- High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines.Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 47.4%Apr 14, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Apr 14, 2026
- High7.4MaxKB is an open-source AI assistant for enterprise.Apr 14, 2026
- Medium5.5MaxKB is an open-source AI assistant for enterprise.Apr 14, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Apr 13, 2026
- High8.1simple-git enables running native Git commands from JavaScript.Apr 13, 2026
- High7.5Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution.Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug.Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report.Apr 13, 2026
- High8.5LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand feature.Apr 13, 2026
- Medium5.5A flaw has been found in Totolink N300RH 6.1c.1353_B20190305.Apr 13, 2026