#cwe-78

共收录 1628 条相关情报。

漏洞预警2026-09-01 发布INFO

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying...

CVE-2026-73709

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adja

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-77

安全公告2026-09-01 发布INFO

Composer: Perforce source URL permits P4PORT `rsh:` command execution

CVE-2026-84361

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-78

漏洞预警2026-09-01 发布INFO

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary c...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pote

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-01 发布INFO

A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmuncompress ...

CVE-2026-84233

A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-01 发布INFO

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary c...

CVE-2026-58571

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pote

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-01 发布INFO

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system comm...

CVE-2026-13336

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-01 发布INFO

LibreNMS versions >= 23.10.0 and < 26.2.0 (fixed in 26.4.0) contain an authenticated OS command injection vulnerability in libvirt discovery. When libvirt support is enabled (en...

CVE-2026-84194

LibreNMS versions >= 23.10.0 and getDevice()->hostname) is concatenated into shell commands (ssh, virsh list/dumpxml/dom

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-01 发布INFO

LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

CVE-2026-84194

LibreNMS versions >= 23.10.0 and getDevice()->hostname) is concatenated into shell commands (ssh, virsh list/dumpxml/dom

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-78

漏洞预警2026-09-01 发布INFO

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the conf...

CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-01 发布INFO

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read t...

CVE-2026-59680

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, g

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-1287

漏洞预警2026-09-01 发布INFO

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rog...

CVE-2026-25706

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-01 发布INFO

A critical local privilege escalation via OS command injection vulnerability has been discovered...

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, aff

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

漏洞预警2026-09-01 发布INFO

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18....

CVE-2026-67394

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, aff

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-31 发布INFO

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path argument of RepoParser.rebuild_class_views() in metagpt/repo...

CVE-2026-79408

An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path arg

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-31 发布INFO

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component asp_setPing Endpoint. Perfo...

CVE-2026-82703

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such manipulation of th...

CVE-2026-82702

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of t

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a informační agentura (DIA) eObčanka-Identifikace on MacOS ...

CVE-2026-59111

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Digitální a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-31 发布INFO

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot R...

CVE-2026-19702

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLG

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsi_mgr.cgi. Performing a manipulation of the argume...

CVE-2026-82692

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-b

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-08-31 发布INFO

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usb_d...

CVE-2026-82691

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78