Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 2.60%Feb 25, 2026
- Medium6.7A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administr…Check if you run itEPSS 0.68%Feb 25, 2026
- Medium6.5A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative pri…Check if you run itEPSS 0.46%Feb 25, 2026
- Critical9.8Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user.Check if you run itEPSS 0.60%Feb 25, 2026
- Critical9.9OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.67%Feb 25, 2026
- Critical9.3All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface.Check if you run itEPSS 1.49%Feb 24, 2026
- High8.7Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the…Check if you run itEPSS 1.27%Feb 24, 2026
- Low2.1A vulnerability was determined in exiftool up to 13.49 on macOS.Check if you run itEPSS 2.88%Feb 24, 2026
- Low2.1A vulnerability was found in Intelbras TIP 635G 1.12.3.5.Check if you run itEPSS 6.72%Feb 24, 2026
- High7.8bleon-ethical/api-gateway-deploy provides API gateway deployment.Check if you run itEPSS 1.15%Feb 24, 2026
- High8.8yt-dlp is a command-line audio/video downloader.Check if you run itEPSS 2.06%Feb 24, 2026
- High7.2A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)…Check if you run itEPSS 0.92%Feb 24, 2026
- High8.8A post-authentication command injection vulnerability in the log file download function of the Zyxel EX3301-T0 firmware versions through 5.50(ABVY.7)C0 could allow an…Check if you run itEPSS 1.45%Feb 24, 2026
- Critical9.8A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute oper…Check if you run itEPSS 1.10%Feb 24, 2026
- Low2.0A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6.Check if you run itEPSS 7.32%Feb 23, 2026
- High8.8TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable.Check if you run itEPSS 1.86%Feb 23, 2026
- High8.0TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable.Check if you run itEPSS 3.16%Feb 23, 2026
- Medium5.5A flaw has been found in Vaelsys 4.1.0.Check if you run itEPSS 7.41%Feb 22, 2026
- Medium5.5A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01.Check if you run itEPSS 7.41%Feb 22, 2026
- High8.0OpenClaw is a personal AI assistant.Check if you run itEPSS 1.92%Feb 21, 2026
- High7.2A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection.Check if you run itEPSS 3.09%Feb 21, 2026
- High8.8Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability.Check this weekEPSS 74.22%Feb 20, 2026
- High8.8Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 5.73%Feb 20, 2026
- High8.8Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability.Check this weekEPSS 74.22%Feb 20, 2026
- Medium6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.53%Feb 20, 2026