Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.May 15, 2026
- High8.3python-utcp is the python implementation of UTCP.May 14, 2026
- Critical9.3HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool.May 14, 2026
- Medium6.0Fleet is open source device management software.May 14, 2026
- Critical9.3mdserver-web is a simple Linux panel.May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Critical9.8Web::Passwd versions through 0.03 for Perl is vulnerable to RCE.May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.May 13, 2026
- Medium6.1Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary…May 13, 2026
- High8.7A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbit…May 13, 2026
- High8.5An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP resulting in privilege escalation.May 13, 2026
- High7.8protobufjs-cli is the command line add-on for protobuf.js.May 13, 2026
- High8.5When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint.May 13, 2026
- Critical9.3ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter.May 13, 2026
- High8.6ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter.May 13, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsa…May 12, 2026
- Critical9.3efw4.X is an Enterprise Framework for Web.May 12, 2026
- High7.2A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under cer…May 12, 2026
- High7.2A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands…May 12, 2026
- High8.8Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.May 12, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…EPSS 0.6%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…EPSS 0.6%May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.May 12, 2026
- Critical9.8The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file op…May 12, 2026