yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to inject yt-dlp options by supplying a dash-prefixed url p...

CVE-2026-109966

yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to

历史摘要 · 未重新核验 · NVD

yt-dlp-web-ui through 4.0.0 Argument Injection via Service.Formats JSON-RPC Method

CVE-2026-109966

yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to

历史摘要 · 未重新核验 · OSV.dev

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of...

CVE-2026-108929

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSs

历史摘要 · 未重新核验 · NVD

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g.,...

CVE-2026-108963

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a data

历史摘要 · 未重新核验 · GitHub Advisory

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user...

CVE-2026-108963

databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a data

历史摘要 · 未重新核验 · NVD

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows command lines usin...

CVE-2026-107802

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pas

历史摘要 · 未重新核验 · NVD

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor...

CVE-2026-107734

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is

历史摘要 · 未重新核验 · NVD

SumatraPDF — Windows command-line argument injection in AI selection-translate

CVE-2026-107802

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pas

历史摘要 · 未重新核验 · OSV.dev

SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

CVE-2026-107734

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is

历史摘要 · 未重新核验 · OSV.dev

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due...

CVE-2026-19482

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform unauthorized actions d...

CVE-2026-18740

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery.

CVE-2026-11939

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to

历史摘要 · 未重新核验 · NVD

An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9...

CVE-2026-87687

An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug

历史摘要 · 未重新核验 · GitHub Advisory

An argument injection vulnerability exists in the configuration management command-line utility...

CVE-2026-87667

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS ver

历史摘要 · 未重新核验 · GitHub Advisory

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecutor component of ufo...

CVE-2026-105791

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the r

历史摘要 · 未重新核验 · NVD

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_...

CVE-2026-105789

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the e

历史摘要 · 未重新核验 · NVD

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/client/mcp/http_ser...

CVE-2026-105788

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the

历史摘要 · 未重新核验 · NVD

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

CVE-2026-102827

simple-git's blockUnsafeOperationsPlugin blocks dangerous git options (--upload-pack/--receive-pack/--exec/...) unless t

历史摘要 · 未重新核验 · GitHub Advisory

Nx: OS command injection via git revisions and remote refs

## Summary Nx core builds several `git` invocations as shell command strings with untrusted values interpolated into th

历史摘要 · 未重新核验 · GitHub Advisory

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipie...

CVE-2026-105326

An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer

历史摘要 · 未重新核验 · NVD