Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.2An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0…EPSS 1.6%Mar 10, 2026
- High7.2A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 thr…EPSS 1.7%Mar 10, 2026
- Critical9.8An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.EPSS 2.2%Mar 10, 2026
- High8.8Ghostty is a cross-platform terminal emulator.EPSS 0.5%Mar 10, 2026
- High8.6Budibase is a low code platform for creating internal tools, workflows, and admin panels.EPSS 0.5%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.EPSS 0.4%Mar 9, 2026
- High8.5A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router.EPSS 1.5%Mar 9, 2026
- Medium5.5A vulnerability was found in Totolink N300RH 6..1c.1353_B20190305.Mar 8, 2026
- High8.8WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.EPSS 2.6%Mar 7, 2026
- Critical9.3XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows u…EPSS 3.1%Mar 7, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.EPSS 0.5%Mar 6, 2026
- Critical9.8AVideo is a video-sharing Platform software.KEVEPSS 6.8%Mar 6, 2026
- High8.6Idno is a social publishing platform.EPSS 1.0%Mar 6, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 contain an exec approvals (must be enabled) allowlist bypass vulnerability that allows attackers to execute arbitrary commands by i…EPSS 0.9%Mar 5, 2026
- High8.6OpenClaw versions prior to 2026.2.14 contain an arbitrary file read vulnerability in the exec-approvals allowlist validation that checks pre-expansion argv tokens but…EPSS 0.3%Mar 5, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing att…EPSS 0.9%Mar 5, 2026
- High8.6FreePBX is an open source IP PBX.EPSS 1.6%Mar 5, 2026
- High7.5FreePBX is an open source IP PBX.EPSS 1.5%Mar 5, 2026
- Medium6.0A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De…EPSS 0.1%Mar 4, 2026
- Critical9.8A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram a…EPSS 3.0%Mar 4, 2026
- High8.8API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection.EPSS 0.9%Mar 4, 2026
- Critical9.5SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.EPSS 0.6%Mar 4, 2026
- Critical9.3An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex Satelli…EPSS 3.0%Mar 4, 2026
- Critical9.3The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interf…EPSS 2.6%Mar 4, 2026
- Critical9.1Froxlor is open source server administration software.EPSS 1.1%Mar 3, 2026