Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Mar 31, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Mar 31, 2026
- High7.8InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective.Mar 31, 2026
- High7.8A command injection vulnerability exists in mlflow/mlflow when serving a model with .EPSS 1.3%Mar 31, 2026
- Critical9.2OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the iMessage attachment staging flow that allows attackers to execute arbitrary commands…Mar 31, 2026
- High8.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI)…EPSS 1.0%Mar 31, 2026
- Critical9.2baserCMS is a website development framework.Mar 31, 2026
- High7.2baserCMS is a website development framework.Mar 31, 2026
- High7.2baserCMS is a website development framework.EPSS 2.3%Mar 31, 2026
- High8.6Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabp…Mar 30, 2026
- Low1.9A vulnerability was detected in raine consult-llm-mcp up to 2.5.3.Mar 30, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.Mar 30, 2026
- Critical10.0A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the function.EPSS 2.4%Mar 30, 2026
- Low2.1A vulnerability was identified in Totolink A3300R 17.0.0cu.557_b20221024.Mar 29, 2026
- High8.8Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when…Mar 29, 2026
- High8.8In Sofia on Xiongmai DVR/NVR (AHB7008T-MH-V2 and NBD7024H-P) 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via a…Mar 29, 2026
- Low1.9A vulnerability has been found in DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6.Mar 29, 2026
- Medium5.5A flaw has been found in elecV2 elecV2P up to 3.8.3.Mar 28, 2026
- Low1.9A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0.Mar 28, 2026
- High7.8Gematik Authenticator securely authenticates users for login to digital health applications.Mar 27, 2026
- High8.9Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Mar 27, 2026
- Medium5.7Fleet is open source device management software.Mar 27, 2026
- Critical10.0The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Mar 27, 2026
- Critical9.8The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Mar 27, 2026