共收录 1612 条相关情报。
← 返回所有主题CVE-2026-101032
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Atta
CVE-2026-101032
navi through 2.24.0 fails to properly escape cheatsheet variable values when substituting them into shell commands. Atta
CVE-2026-100844
MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_run
CVE-2026-100852
AzuraCast through 0.23.x contains a command injection vulnerability in the Liquidsoap config generation for live recordi
CVE-2026-100852
CVE-2026-100852 是 AzuraCast 0.23.x 及更早版本中的一个命令注入漏洞，CVSS 3.1 评分为 8.8（向量 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H），属于高危级别。Azura
CVE-2026-100844
MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_run
CVE-2026-100852
AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recordin
CVE-2026-100382
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Fo
CVE-2026-100368
### Impact An OS command injection vulnerability exists in the PowerShell and Cmd shell wrappers provided by the `CliInv
CVE-2026-85082
Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely sep
CVE-2026-93289
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute
CVE-2026-13249
An unauthenticated Remote Code Execution via Arbitrary File Upload vulnerability in the web management interface in Hone
CVE-2026-93289
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute
CVE-2026-81537
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
CVE-2026-81537
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
CVE-2026-80425
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
CVE-2026-82369
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authentica
CVE-2026-6721
IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is inc
CVE-2026-80379
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
CVE-2026-80412
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to