#cwe-78

共收录 1612 条相关情报。

← 返回所有主题
漏洞预警2026-10-28 发布INFO

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentia...

CVE-2026-67074

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-28 发布CRITICAL

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410 where user-controlled URLs are unsafely processed, lead...

CVE-2026-115904

Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.241

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布CRITICAL

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authe...

CVE-2026-118477

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection

来源摘录 · NVD

漏洞预警2026-10-28 发布CRITICAL

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the /exec/init and /exec/config JSON endpo...

CVE-2026-114278

The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespa

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-110541

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86394

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3....

CVE-2026-86379

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86399

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-86396

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

来源摘录 · NVD

漏洞预警2026-10-28 发布HIGH

Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1....

CVE-2026-86395

Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.

来源摘录 · NVD

安全公告2026-10-28 发布INFO

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows...

CVE-2013-20007

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to ex

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-28 发布HIGH

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into...

CVE-2013-20007

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to ex

来源摘录 · NVD

安全公告2026-10-27 发布INFO

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

CVE-2026-116676

### Summary Atlantis passes the Terraform `workspace` value from a pull request's `atlantis.yaml` into a shell command

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布INFO

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allows an authenticated remote attacker with any web account t...

CVE-2026-112351

Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that allow

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-27 发布HIGH

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-contr...

CVE-2026-116676

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service runs with root privileges and listens on the local loopback ...

CVE-2026-102815

An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3. The service run

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated at...

CVE-2026-102814

An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbi...

CVE-2026-104353

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan

CVE-2026-116676

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-27 发布INFO

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command ...

CVE-2026-117511

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function proce

历史摘要 · 未重新核验 · NVD