Browse CVEs

HIGH 7.2 CVE-2024-55904 IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, a… Devops Deploy 7.0.5.26 / 7.1.2.22+ Fix from $1,9502025-02-14 CRITICAL 9.8 CVE-2025-25067 mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands. Mypro 1.4+ Fix from $2,3002025-02-13 MEDIUM 6.3 CVE-2025-1229 A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability … Mitigation only Fix from $1,6002025-02-12 HIGH 8.6 CVE-2025-0110 A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make … Mitigation only Fix from $1,9502025-02-12 HIGH 8.8 CVE-2025-1244 A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on… Mitigation only Fix from $1,9502025-02-12 HIGH 7.2 CVE-2024-50569 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker… Fortiweb 7.4.6+ Fix from $1,9502025-02-11 HIGH 7.2 CVE-2024-40584 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer versio… Fortimanager Cloud 7.2.6 / 7.2.8+ Fix from $1,9502025-02-11 HIGH 7.2 CVE-2024-50567 An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacke… Fortiweb 7.4.6+ Fix from $1,9502025-02-11 HIGH 7.2 CVE-2024-47908EPSS 22% OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achi… Cloud Services Appliance 5.0.5+ Fix from $1,9502025-02-11 HIGH 8.3 CVE-2024-8684 OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated… Mitigation only Fix from $1,9502025-02-10 HIGH 7.5 CVE-2025-24366 SFTPGo is an open source, event-driven file transfer solution. SFTPGo supports execution of a defined set of commands via SSH. Besides a set of defau… Patch available Fix from $1,9502025-02-07 HIGH 8.0 CVE-2024-57357EPSS 5% An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, whi… Tl Wpa8630 Firmware Mitigation only Fix from $1,9502025-02-07 HIGH 8.8 CVE-2024-51450 IBM Security Verify Directory 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sendin… Security Verify Directory after 10.0.3 Fix from $1,9502025-02-06 HIGH 8.8 CVE-2025-20029EPSS 7% Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execu… Big Ip Access Policy Manager 15.1.10.6 / 16.1.5.2+ Fix from $1,9502025-02-05 MEDIUM 6.8 CVE-2024-56132EPSS 6% Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product … Multi Tenant Loadmaster 7.1.35.13 / 7.2.54.13+ Fix from $1,6002025-02-05 CRITICAL 9.5 CVE-2025-24971 DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability… Patch available Fix from $2,3002025-02-04 HIGH 8.8 CVE-2025-25039 A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows remote authenticated users to ru… Clearpass Policy Manager 6.11.10 / 6.12.4+ Fix from $1,9502025-02-04 HIGH 7.2 CVE-2024-23690 The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remot… Mitigation only Fix from $1,9502025-02-04 HIGH 8.8 CVE-2024-40890 KEVEPSS 22% **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmw… Vmg1312 B10a Firmware Mitigation only Fix from $1,9502025-02-04 HIGH 8.8 CVE-2024-40891 KEVEPSS 22% **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B1… Vmg1312 B10a Firmware Mitigation only Fix from $1,9502025-02-04 CRITICAL 9.8 CVE-2024-53584 OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter. Openpanel No fix yet Fix from $2,3002025-01-31 CRITICAL 9.8 CVE-2025-0680 Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arb… No fix yet Fix from $2,3002025-01-30 CRITICAL 9.8 CVE-2025-20014 mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by a… Mitigation only Fix from $2,3002025-01-29 CRITICAL 9.8 CVE-2025-20061 mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an … Mitigation only Fix from $2,3002025-01-29 HIGH 8.1 CVE-2025-0798EPSS 7% A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of… Escan Anti Virus No fix yet Fix from $1,9502025-01-29 CRITICAL 9.3 CVE-2025-24480 A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could … No fix yet Fix from $2,3002025-01-28 HIGH 7.2 CVE-2025-22604EPSS 5% Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject ma… Cacti 1.2.29+ Fix from $1,9502025-01-27 CRITICAL 9.8 CVE-2024-57595 DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to … Mitigation only Fix from $2,3002025-01-27 HIGH 7.8 CVE-2025-22606 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In version 4.0.0-beta.358 and possibly earlier ve… Coolify No fix yet Fix from $1,9502025-01-24 HIGH 7.8 CVE-2025-22605 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Starting in version 4.0.0-beta.18 and prior to 4.… Coolify Patch available Fix from $1,9502025-01-24