Nx: OS command injection in the @nx/docker release pipeline
CVE-2026-104859
Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1,
#cwe-78
共收录 1612 条相关情报。
← 返回所有主题Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.
CVE-2026-93698
Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection....
CVE-2026-71452
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects Ea
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are...
CVE-2009-20011
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote comman
Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php...
CVE-2009-20010
Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail su
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-71452
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects Ea
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. ...
CVE-2026-71451
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects Eas
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1....
CVE-2026-84682
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adj
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63.
CVE-2026-71451
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects Eas
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer comm...
CVE-2026-84682
A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adj
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN...
CVE-2026-102294
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted
A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI...
CVE-2026-12545
A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due...
CVE-2026-12542
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the
A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Satellite due to the i...
CVE-2026-12545
A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments a...
CVE-2026-12542
A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a syst...
CVE-2026-102294
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-sup...
CVE-2026-12541
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump t
A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system comma...
CVE-2026-12540
A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The req
A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a job template has th...
CVE-2026-12405
A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl...
CVE-2026-79898
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL