Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A flaw has been found in Edimax BR-6478AC V3 1.0.15.Open the advisoryDec 5, 2025
- Low2.0A vulnerability was detected in Edimax BR-6478AC V3 1.0.15.Open the advisoryDec 5, 2025
- Low2.0A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15.Open the advisoryDec 5, 2025
- Critical9.8Array Networks ArrayOS AG OS Command Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2025
- High8.9Remote Keyboard Desktop 1.0.1 enables remote attackers to execute system commands via the rundll32.exe exported function export, allowing unauthenticated code execution.Open the advisoryDec 4, 2025
- Medium6.9Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in…Open the advisoryDec 4, 2025
- High7.2Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online.Open the advisoryDec 3, 2025
- Critical9.3TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 (discovered in V2.1.8-B20201030.1539) contain an OS command injection vulnerability in the…Open the advisoryDec 3, 2025
- High8.8A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into…Open the advisoryDec 3, 2025
- Critical9.8MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers.Open the advisoryDec 1, 2025
- Critical9.1By providing a command-line argument starting with a semi-colon ; to an API endpoint created by the EnhancedCommandExecutor class of the HexStrike AI MCP server, the r…Open the advisoryNov 30, 2025
- High8.8A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(ABVY.6.3)C0 and earlier could allow an authentic…Open the advisoryNov 18, 2025
- Low2.1A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5.Open the advisoryNov 18, 2025
- High7.2Fortinet FortiWeb OS Command Injection VulnerabilityPatch nowKEVEPSS 55.58%Nov 18, 2025
- High8.6Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in NCP-HG100 1.4.48.16 and earlier.Open the advisoryNov 14, 2025
- High8.6Sangoma FreePBX OS Command Injection VulnerabilityPatch nowKEVEPSS 84.62%Nov 6, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Low2.3A command injection vulnerability has been reported to affect HybridDesk Station.Open the advisoryAug 29, 2025
- High7.1A command injection vulnerability has been reported to affect QuRouter 2.5.1.Open the advisoryAug 29, 2025
- High8.6TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection VulnerabilityPatch nowKEVEPSS 37.73%Aug 29, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 15, 2025
- Critical9.4N-able N-Central Command Injection VulnerabilityPatch nowKEVEPSS 3.45%Aug 13, 2025
- Critical9.8Trend Micro Apex One OS Command Injection VulnerabilityPatch nowKEVEPSS 23.92%Aug 5, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityPatch nowKEVEPSS 69.00%Apr 17, 2025
- Critical10.0PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).Patch nowKEVEPSS 0.99%Mar 25, 2025