Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.9Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Mar 27, 2026
- Medium5.7Fleet is open source device management software.Mar 27, 2026
- Critical10.0The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Mar 27, 2026
- Critical9.8The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Mar 27, 2026
- High7.1OS Command Injection vulnerability in NEC Platforms, Ltd.Mar 27, 2026
- High7.1OS Command Injection vulnerability in NEC Platforms, Ltd.Mar 27, 2026
- High8.6OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.Mar 27, 2026
- Critical9.9OpenHands is software for AI-driven development.Mar 27, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 26, 2026
- High7.7Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary c…EPSS 0.5%Mar 26, 2026
- High8.7thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script t…Mar 26, 2026
- Critical9.9OneUptime is an open-source monitoring and observability platform.Mar 26, 2026
- High8.0A flaw was found in Foreman.EPSS 1.4%Mar 26, 2026
- High7.4A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938.Mar 26, 2026
- High8.6An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary sys…EPSS 0.9%Mar 26, 2026
- High7.2Modoboa is a mail hosting and management platform.Mar 25, 2026
- Critical9.8thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user input is concatenated into a…Mar 25, 2026
- Critical9.8node-tesseract-ocr is an npm package that provides a Node.js wrapper for Tesseract OCR.Mar 25, 2026
- Critical9.8textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.Mar 25, 2026
- High7.3Vim is an open source, command line text editor.Mar 24, 2026
- Medium6.7sbt is a build tool for Scala, Java, and others.Mar 24, 2026
- High7.7Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode.Mar 24, 2026
- Low2.1Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution.EPSS 0.4%Mar 24, 2026
- High8.8Intake is a package for finding, investigating, loading and disseminating data.Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Mar 24, 2026