Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch NameOct 14, 2026
- Critical9.2GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() RefspecOct 14, 2026
- Critical9.9Hestia Control Panel is a lightweight and powerful control panel for the modern web.Oct 14, 2026
- UnknownGitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting.Oct 14, 2026
- High7.0VNote is a note-taking platform.EPSS 0.1%Oct 13, 2026
- Critical9.0Potential arbitrary code execution, under specific configurations.EPSS 0.3%Oct 13, 2026
- High8.5An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.EPSS 0.2%Oct 8, 2026
- High8.4An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.EPSS 0.2%Oct 8, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityKEVEPSS 6.4%Sep 5, 2026
- High8.5hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path.EPSS 0.2%Aug 22, 2026
- Medium6.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…EPSS 0.4%May 12, 2026
- Medium6.7Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1…EPSS 0.2%Apr 17, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityKEVEPSS 99.0%Jan 21, 2026
- High7.2Mitel SIP Phones Argument Injection VulnerabilityKEVEPSS 41.6%Aug 12, 2024
- High8.8Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityKEVEPSS 99.2%Aug 24, 2022
- Critical9.8PHPMailer Command Injection VulnerabilityKEVEPSS 99.7%Dec 30, 2016
16 records · page 1 of 1
PreviousNext