Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allow…Apr 8, 2026
- Medium5.5A vulnerability was identified in idachev mcp-javadc up to 1.2.4.Apr 8, 2026
- Medium6.3Tophat is a mobile applications testing harness.Apr 8, 2026
- High8.5An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a spec…Apr 8, 2026
- High8.5An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a spe…Apr 8, 2026
- High7.8Fleet is open source device management software.Apr 8, 2026
- High7.2Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert namesApr 8, 2026
- Medium5.5A weakness has been identified in suvarchal docker-mcp-server up to 0.1.0.Apr 7, 2026
- Critical9.3dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Apr 7, 2026
- Critical9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.Apr 7, 2026
- High7.5File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Apr 7, 2026
- High7.2Emissary is a P2P based data-driven workflow engine.Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Apr 7, 2026
- High8.0Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Collector application.EPSS 1.0%Apr 7, 2026
- High8.8pyLoad is a free and open-source download manager written in Python.Apr 7, 2026
- Critical9.3Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to exec…EPSS 6.2%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Medium5.5A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.Apr 7, 2026
- Medium5.5A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.Apr 6, 2026
- Medium5.5A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024.Apr 6, 2026
- Medium5.5A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Apr 6, 2026