Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.3@mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath…CVE-2026-110639 · CVE.org · NIST NVDOct 14, 2026
Critical9.3doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag().CVE-2026-110638 · CVE.org · NIST NVDOct 14, 2026
High8.5buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file nam…CVE-2026-110637 · CVE.org · NIST NVDOct 14, 2026
Critical9.3pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths.CVE-2026-110636 · CVE.org · NIST NVDOct 14, 2026
Critical9.3webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled.CVE-2026-110635 · CVE.org · NIST NVDOct 14, 2026
Critical9.3git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API.CVE-2026-110634 · CVE.org · NIST NVDOct 14, 2026
Critical9.3office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf(…CVE-2020-37282 · CVE.org · NIST NVDOct 14, 2026
Medium6.6Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.CVE-2026-101215 · CVE.org · NIST NVDOct 14, 2026
Low3.8A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow.CVE-2026-73792 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 14, 2026
High8.8Koha is vulnerable to OS command injection in the Task Scheduler deletion path.CVE-2026-105106 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.6%Oct 14, 2026
Medium6.7The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.CVE-2026-46449 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.7%Oct 14, 2026
Critical9.2Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and Oct…CVE-2026-110447 · Collabora · Collabora Online - Built-in CODE Server · CVE.org · FIRST EPSS · NIST NVDEPSS 1.2%Oct 13, 2026
Critical9.9Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result i…CVE-2026-103848 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.4%Oct 13, 2026
High8.4Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names.CVE-2026-110233 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.1%Oct 13, 2026
High7.0VNote is a note-taking platform.CVE-2026-86022 · vnotex · vnote · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 0.1%Oct 13, 2026
Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.CVE-2026-110392 · CVE.org · FIRST EPSS · NIST NVDEPSS 1.2%Oct 13, 2026
Medium6.1A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7…CVE-2026-106171 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.7%Oct 13, 2026
Medium6.9Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.CVE-2026-53563 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 13, 2026
Critical9.3CVFS contained an input validation issue affecting command execution.CVE-2026-77099 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
High8.5Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, a…CVE-2026-75826 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.9%Oct 13, 2026
High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element…CVE-2026-82096 · ibm · datastage on cloud pak for data · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 12, 2026
High8.7IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controll…CVE-2026-18529 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.7%Oct 12, 2026
High7.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Tech…CVE-2026-18390 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Oct 12, 2026
High8.6A security flaw has been discovered in Linksys E1700 1.0.0.4.003.CVE-2026-108894 · CVE.org · FIRST EPSS · NIST NVDEPSS 2.2%Oct 12, 2026
Critical9.4OpenSpug File Transfer transfer os command injectionCVE-2026-108540 · OpenSpug · Spug · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSSEPSS 1.7%Oct 11, 2026