#cwe-78

共收录 1612 条相关情报。

← 返回所有主题
漏洞预警2026-10-08 发布INFO

The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by su...

CVE-2026-107704

The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identi

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability....

CVE-2026-107459

The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

An OS command injection vulnerability exists in the account management subsystem of Brocade...

CVE-2026-87677

An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

An OS command injection vulnerability exists in the REST API management interface of Brocade...

CVE-2026-94581

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session...

CVE-2026-94579

An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines durin

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

A command injection vulnerability exists in the WebTools administrative interface handling...

CVE-2026-94586

A command injection vulnerability exists in the WebTools administrative interface handling configuration download or fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download...

CVE-2026-87662

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsan

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

An OS command injection vulnerability exists in the configuration management subsystem of Brocade...

CVE-2026-87675

An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions bef

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric...

CVE-2026-87674

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on...

CVE-2026-87673

An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versi

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

An OS command injection vulnerability exists in the time and zone management subsystem of Brocade...

CVE-2026-87666

An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions bef

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

A command injection vulnerability in the REST API management interface of Brocade Fabric OS...

CVE-2026-87680

A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allow

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-08 发布INFO

Multiple OS Command Injection vulnerabilities exist in the management interface and session...

CVE-2026-87682

Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Broca

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-07 发布INFO

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

CVE-2026-105697

### Summary Before **Langflow 1.10.3**, the MCP stdio transport launched whatever `command` / `args` a user put in an M

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execut...

CVE-2026-102160

An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated

历史摘要 · 未重新核验 · NVD

安全公告2026-10-06 发布INFO

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

CVE-2026-86540

## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Comm...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutraliz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization o...

CVE-2026-105797

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_s...

CVE-2026-105793

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-06 发布INFO

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator versi...

CVE-2026-91140

An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autono

历史摘要 · 未重新核验 · NVD