Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Mar 24, 2026
- High8.6A vulnerability was found in D-Link DIR-825 and DIR-825R 1.0.5/4.5.1.Mar 24, 2026
- High7.7Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Mar 23, 2026
- High8.6A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826.Mar 23, 2026
- High8.6Blinko is an AI-powered card note-taking project.EPSS 0.4%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Mar 23, 2026
- High8.5Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…EPSS 0.6%Mar 23, 2026
- High8.5Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…EPSS 0.6%Mar 23, 2026
- Low2.0A weakness has been identified in kalcaddle kodbox 1.64.Mar 23, 2026
- High8.1WWBN AVideo is an open source video platform.Mar 23, 2026
- Critical10.0WWBN AVideo is an open source video platform.KEVMar 23, 2026
- High8.9A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0.Mar 23, 2026
- Critical9.8Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi…Mar 23, 2026
- High7.4A flaw has been found in Linksys MR9600 2.0.6.206937.Mar 22, 2026
- Low2.1A security flaw has been discovered in Tenda F453 1.0.0.3.Mar 22, 2026
- High7.5WWBN AVideo is an open source video platform.Mar 22, 2026
- High7.7OpenClaw versions prior to 2026.2.22 fail to sanitize shell startup environment variables HOME and ZDOTDIR in the system.run function, allowing attackers to bypass com…EPSS 1.0%Mar 21, 2026
- High8.1dynaconf is a configuration management tool for Python.Mar 20, 2026
- High7.8AWStats 8.0 is vulnerable to Command Injection via the open functionEPSS 1.0%Mar 20, 2026
- Medium5.5A vulnerability was determined in D-Link DIR-820LW 2.03.Mar 20, 2026
- Medium5.5A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227.Mar 20, 2026
- Low1.9A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880.Mar 20, 2026
- Medium5.7A command injection vulnerability has been reported to affect QuNetSwitch.EPSS 0.5%Mar 20, 2026
- Medium6.3A command injection vulnerability has been reported to affect QuNetSwitch.EPSS 0.9%Mar 20, 2026
- High8.1A command injection vulnerability has been reported to affect QuNetSwitch.EPSS 1.1%Mar 20, 2026