Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary…Apr 3, 2026
- Critical9.0Budibase is an open-source low-code platform.Apr 3, 2026
- High8.7Budibase is an open-source low-code platform.Apr 3, 2026
- High7.8FastMCP is the standard framework for building MCP applications.EPSS 0.7%Apr 3, 2026
- Low2.1A vulnerability has been found in Trendnet TEW-657BRM 1.00.1.Apr 2, 2026
- Low2.1A flaw has been found in Trendnet TEW-657BRM 1.00.1.Apr 2, 2026
- Low2.1A vulnerability was detected in Trendnet TEW-657BRM 1.00.1.Apr 2, 2026
- Low2.1A security vulnerability has been detected in Trendnet TEW-657BRM 1.00.1.Apr 2, 2026
- Low2.1A weakness has been identified in Trendnet TEW-657BRM 1.00.1.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_firewall.cgi.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_clamav.cgi.Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi.Apr 2, 2026
- High7.8Glances is an open-source system cross-platform monitoring tool.Apr 2, 2026
- High8.7In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation proc…Apr 2, 2026
- High8.8Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution.Apr 2, 2026
- High8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resu…Apr 2, 2026
- High7.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…EPSS 0.4%Apr 1, 2026
- Medium6.8NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments.Mar 31, 2026
- Critical9.8wenxian is a tool to generate BIBTEX files from given identifiers (DOI, PMID, arXiv ID, or paper title).Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Mar 31, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Mar 31, 2026