Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration...
CVE-2026-73680
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authentica
#cwe-78
共收录 1628 条相关情报。
← 返回所有主题IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL...
CVE-2026-17186
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper ne
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a...
CVE-2026-17179
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to c
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vul
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execu...
CVE-2026-73680
CVE-2026-73680 是 Cockpit CMS（一个开源内容管理系统）中的命令注入漏洞，影响 2.14.0 及更早版本。漏洞存在于其 FFmpeg 视频处理集成中。由于系统在将上传视频的文件名拼接到 shell 命令时，未先进行有
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.
CVE-2026-17186
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper ne
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection.
CVE-2026-17179
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to c
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible vi...
CVE-2026-19188
A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vul
A command injection vulnerability exists in Security Center where a remote, unauthenticated...
CVE-2026-19682
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this
An authenticated command injection vulnerability exists in Security Center related to file upload...
CVE-2026-19681
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacke
A local privilege escalation vulnerability exists in Security Center. An attacker with write...
CVE-2026-19635
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific config
An input validation vulnerability exists in Security Center's file upload handling, where...
CVE-2026-19679
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of u
A command injection vulnerability exists in Tenable Security Center. An authenticated...
CVE-2026-19628
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify applica
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying ope...
CVE-2026-19682
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially craft...
CVE-2026-19681
An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacke
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream comman...
CVE-2026-19679
An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of u
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with ...
CVE-2026-19635
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific config
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command ex...
CVE-2026-19628
A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify applica
A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such man...
CVE-2026-19771
A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /c
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started...
CVE-2026-73667
OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChor