Renovate before 44.14.7 Command Injection via distributionType
CVE-2026-88889
Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to
#cwe-78
共收录 1626 条相关情报。
← 返回所有主题Renovate before 44.14.7 Command Injection via Mix organization
CVE-2026-88888
Renovate before 44.14.7 contains a command injection vulnerability in the Mix manager when processing private dependenci
Renovate before 44.14.7 Command Injection via gradle-wrapper
CVE-2026-88886
Renovate is a dependency update automation tool. In versions before 44.14.7 (and in Mend Renovate CE/EE distributions be
Renovate before 44.14.7 Command Injection via depName
CVE-2026-88885
Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depNam
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-acco...
CVE-2026-88282
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be execute
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root.
CVE-2026-88277
GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root.
CVE-2026-88276
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary c
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied.
CVE-2026-88275
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary comma
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary commands as root.
CVE-2026-88274
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled wireless SSID containing shell syntax to execute arbitrary
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration assignment and execute arbitrary commands as root.
CVE-2026-88273
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled PPPoE username to escape a sourced shell configuration ass
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as arbitrary root commands when the stored username is late...
CVE-2026-88272
GeoVision GV-LPC2211 V1.13 allows an administrator-controlled username containing shell metacharacters to be executed as
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env fil...
CVE-2026-13745
A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
CVE-2026-0302
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arb
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a roo...
CVE-2026-0309
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated a...
CVE-2026-87911
An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allo...
CVE-2026-73787
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information o
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploi...
CVE-2026-73769
A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote att
Tanium addressed an unauthorized code execution vulnerability in Enforce.
CVE-2026-87088
Tanium addressed an unauthorized code execution vulnerability in Enforce.
Composer arbitrary command execution via a malicious package's Perforce source URL
CVE-2026-84361
## Summary If the `p4` Perforce CLI client is installed, a malicious dependency package from a package repository allow
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client (`mysql`) without the --binary-mode flag, so the ...
CVE-2026-86733
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line