Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)
CVE-2026-68519
## Summary In Glances 4.5.5 the `--disable-config-exec` flag was extended (GHSA-3vwc-qwhc-3mj7) to stop `secure_popen()`
#advisory
共收录 23530 条相关情报。
← 返回所有主题Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection
CVE-2026-62982
## Summary CVE-2026-32608 ("Command Injection via Process Names in Action Command Templates") was fixed (commit `5680a5d
Azuriom CMS Money Transfer ProfileController.php transferMoney toctou
CVE-2026-19975
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file ap
treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authentication
CVE-2026-19974
A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the
【腾讯云认证】腾讯私有云交付运维工程师 - 里约智能网关认证下架公告
腾讯云于2026年8月17日发布公告，宣布“腾讯私有云交付运维工程师 - 里约智能网关认证”正式下架。该公告属于认证体系调整，而非安全漏洞披露。公告中未提供具体下架原因、替代认证方案或对已持证人员的影响说明，也未关联任何CVE漏洞或安全事件
【云数据库 MySQL】关于服务等级协议更新的公告
【云数据库 MySQL】关于服务等级协议更新的公告
【腾讯云认证】腾讯云计算工程师认证升级公告
【腾讯云认证】腾讯云计算工程师认证升级公告
A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function...
CVE-2026-19963
A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /go
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the...
CVE-2026-19965
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordRe
A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL...
CVE-2026-19964
A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/
A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function...
CVE-2026-19962
A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /gofo
A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function...
CVE-2026-19959
A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /gofor
A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey...
CVE-2026-19961
A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/fo
A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the...
CVE-2026-19958
A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of
A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function...
CVE-2026-19960
A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file
A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function...
CVE-2026-19957
A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/to
iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection
CVE-2026-19958
A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of
A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element...
CVE-2026-19956
A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_
A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src...
CVE-2026-19955
A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component T
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter...
CVE-2026-74790
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused T