Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.May 24, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.May 24, 2026
- High8.9A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521.May 24, 2026
- Medium5.5A vulnerability was determined in NousResearch hermes-agent up to 5157f5427f19488b31c6fdebbacd15d798ce7f63.May 24, 2026
- Low2.1A vulnerability has been found in Edimax EW-7438RPn up to 1.31.May 24, 2026
- Low2.1A weakness has been identified in Edimax EW-7438RPn up to 1.31.May 23, 2026
- Critical9.2shell-quote's function did not validate object-token inputs against the operator model used by .May 22, 2026
- High7.5When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and use bsddialog(1) to prompt the user to select a network.May 21, 2026
- Medium6.7Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.May 21, 2026
- Low3.0Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unint…May 21, 2026
- High7.5A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.May 21, 2026
- High8.5A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software.May 20, 2026
- Medium6.3A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands o…May 20, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.May 19, 2026
- High8.7In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.May 19, 2026
- High8.8A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7.May 19, 2026
- Medium5.4A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7.May 19, 2026
- Critical9.8An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via…May 19, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).May 18, 2026
- Critical9.8WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium.May 18, 2026
- Low1.3A vulnerability has been found in vercel ai up to 3.0.97.EPSS 7.0%May 17, 2026
- High7.0Tabby (formerly Terminus) is a highly configurable terminal emulator.May 15, 2026
- Critical9.4Tabby (formerly Terminus) is a highly configurable terminal emulator.May 15, 2026
- High7.0Vim is an open source, command line text editor.May 15, 2026
- Critical10.0PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization.May 15, 2026