共收录 1612 条相关情报。
← 返回所有主题CVE-2026-112943
launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did no
CVE-2026-113390
A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of th
CVE-2026-113378
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src
CVE-2026-112370
A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usr
CVE-2026-112900
Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Gh
CVE-2026-112301
A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Comm
CVE-2026-108983
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
CVE-2024-4457
The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness
CVE-2026-96620
The Claude Agent SDK for Python passed the `resume` option to the Claude CLI without validation, allowing a value beginn
CVE-2026-103929
## Summary Untrusted local .mise.toml [settings] can set the shell interpreter args (unix/windows default_inline / defa
CVE-2026-110908
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulner
CVE-2026-0320
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas
CVE-2026-0313
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an a
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi
CVE-2026-55786
Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /m
CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
CVE-2026-110392
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open
CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution
CVE-2026-100207
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an
CVE-2026-106171
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F