An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system commands by supplying craft...

CVE-2026-87969

An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execu

历史摘要 · 未重新核验 · NVD

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the under...

CVE-2026-86102

An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access t

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of ...

CVE-2026-101076

A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_

历史摘要 · 未重新核验 · NVD

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The [ConsoleLogH...

CVE-2026-4556

Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which co

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Tim...

CVE-2026-101075

A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation of the...

CVE-2026-101072

A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.c

历史摘要 · 未重新核验 · NVD

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

## `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78) ### Summary The `grep_search` tool

历史摘要 · 未重新核验 · GitHub Advisory

An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for managing the Multi-Cloud Object ...

CVE-2026-86330

An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This comp

历史摘要 · 未重新核验 · NVD

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with access to NeuVector’s internal...

CVE-2026-78424

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write)

历史摘要 · 未重新核验 · NVD

OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes

CVE-2026-78424

Improper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write)

历史摘要 · 未重新核验 · OSV.dev

Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/...

CVE-2026-91006

Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a child Karaf JV

历史摘要 · 未重新核验 · NVD

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrative user may send a crafted HTTP request and execute an a...

CVE-2026-86530

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally. An administrat

历史摘要 · 未重新核验 · NVD

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._unzip of the file /www/server/panel/class/panelTask.py of t...

CVE-2026-101009

A vulnerability was determined in aaPanel BaoTa up to 11.8.0. The affected element is the function panelTask.bt_task._un

历史摘要 · 未重新核验 · NVD

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Su...

CVE-2026-101007

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/network_tools of the component Tools Ping Handler...

CVE-2026-101002

A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Inter...

CVE-2026-101001

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cg

历史摘要 · 未重新核验 · NVD

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Manageme...

CVE-2026-100896

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the fi

历史摘要 · 未重新核验 · NVD

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask...

CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests gen

历史摘要 · 未重新核验 · GitHub Advisory

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped th...

CVE-2026-101045

Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests gen

历史摘要 · 未重新核验 · NVD

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them...

CVE-2026-101032

navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Atta

历史摘要 · 未重新核验 · GitHub Advisory