Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version 0.8.135 might allow remote unauthenticated actors to obt...

CVE-2026-89332

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version

历史摘要 · 未重新核验 · NVD

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-control...

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Ch

历史摘要 · 未重新核验 · NVD

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed ho

历史摘要 · 未重新核验 · GitHub Advisory

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed ho

历史摘要 · 未重新核验 · NVD

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path...

CVE-2026-86169

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_cod

历史摘要 · 未重新核验 · GitHub Advisory

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_code defaults to None instead of False, causing the security...

CVE-2026-86169

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_cod

历史摘要 · 未重新核验 · NVD

Axolotl through 0.18.0 Remote Code Execution via Multipack Patching

CVE-2026-86169

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trust_remote_cod

历史摘要 · 未重新核验 · OSV.dev

Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to read arbitrary files from the host filesystem by embedding m...

CVE-2026-82525

Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that allows attackers to rea

历史摘要 · 未重新核验 · NVD

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this ...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated use

历史摘要 · 未重新核验 · NVD

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

## Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution Th

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integrity. T...

CVE-2026-76139

A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote

历史摘要 · 未重新核验 · NVD

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or s...

CVE-2026-75569

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without

历史摘要 · 未重新核验 · NVD

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols G...

CVE-2026-22306

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext trans

历史摘要 · 未重新核验 · NVD

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.0, Orval resolves remote and local external $ref values w...

CVE-2026-62680

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.

历史摘要 · 未重新核验 · NVD

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/a...

CVE-2026-45272

MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlie

历史摘要 · 未重新核验 · NVD

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim constructs and executes a vimgrep command using an insuffic...

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, StructMembers() in runtime/autoload/ccomplete.vim co

历史摘要 · 未重新核验 · NVD

Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.

CVE-2026-73367

Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.

历史摘要 · 未重新核验 · NVD

The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats the `CLAUDE_PROJECT_DIR` environment variable — automatical...

CVE-2026-49986

The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats th

历史摘要 · 未重新核验 · NVD

In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first. This affects appli...

CVE-2026-19884

In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiri

历史摘要 · 未重新核验 · NVD

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STD...

CVE-2026-6464

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as p

历史摘要 · 未重新核验 · NVD