Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter.EPSS 0.1%Oct 15, 2026
- High7.7n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log OperationEPSS 0.3%Oct 14, 2026
- High8.4MariaDB server is a community developed fork of MySQL server.EPSS 0.3%Oct 9, 2026
- High7.1In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the O…EPSS 0.2%Oct 8, 2026
- High7.3A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d a…EPSS 0.1%Oct 8, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityEPSS 0.4%Sep 1, 2026
- High7.5The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code executio…May 22, 2026
- Medium6.4Traefik is an HTTP reverse proxy and load balancer.May 15, 2026
- High8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.May 11, 2026
- High7.0OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables.May 5, 2026
- High8.5OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows attackers to inject malicious environment vari…Apr 28, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Apr 23, 2026
- High8.5OpenClaw before 2026.3.28 loads the current working directory .env file before trusted state-dir configuration, allowing environment variable injection.Apr 21, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.Apr 13, 2026
- High7.7OpenClaw before 2026.3.22 contains an environment variable override handling vulnerability that allows attackers to bypass the shared host environment policy through i…Apr 10, 2026
- High7.8Local privilege escalation due to improper handling of environment variables.Apr 10, 2026
- High7.5When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL…Apr 10, 2026
- Medium6.8An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a mal…Apr 8, 2026
- Medium6.8An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a m…Apr 8, 2026
- Medium6.9OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution.Mar 18, 2026
- Medium6.7Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability.Mar 4, 2026
- High8.3eBay API MCP Server is an open source local MCP server providing AI assistants with comprehensive access to eBay's Sell APIs.Feb 21, 2026
22 records · page 1 of 1
PreviousNext