共收录 1612 条相关情报。
← 返回所有主题CVE-2026-65130
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection.
CVE-2026-95675
D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that a
CVE-2026-74849
Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerabil
CVE-2026-94490
A security flaw has been discovered in OctoPrint 1.0.0. Affected by this issue is the function executeSystemCommand of t
CVE-2026-79079
An issue in CrossWire Xiphos <= 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/
CVE-2026-79916
MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members can inject con
CVE-2026-77521
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool, skil
CVE-2026-93012
Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a
CVE-2026-94106
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames
CVE-2026-94106
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames
CVE-2026-94106
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames
CVE-2026-93958
该条目来自 NVD，编号 CVE-2026-93958，涉及 D-Link R95（硬件型号 BE9500）路由器固件版本 1.00.16。漏洞根因位于设备文件 /bin/ssi 中 DHMAPI 组件所调用的 system 函数处理逻辑：
CVE-2026-84085
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutral
CVE-2026-80442
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCert
CVE-2026-81937
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelog_config file
CVE-2026-84071
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functio
CVE-2026-82892
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutraliza
CVE-2026-81623
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileg
CVE-2026-81669
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI comm
CVE-2026-82887
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to impro