共收录 1628 条相关情报。
← 返回所有主题CVE-2026-79755
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio loca
CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary com
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename o
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build en
CVE-2026-53611
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet
CVE-2026-53611
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet
CVE-2025-46418
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.
CVE-2026-84694
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on man
CVE-2026-84694
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on man
CVE-2026-84694
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on man
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
CVE-2026-84361
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package
CVE-2026-73767
Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation o
CVE-2026-73753
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitr
CVE-2026-73722
Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an
CVE-2026-73720
Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to ac
CVE-2026-73717
A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that co
CVE-2026-73716
A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that c
CVE-2026-73712
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbit