Lucene search
+L

36616 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/27 12:00 a.m.•16 views

MiracleLinux 8 : container-tools:rhel8 (AXSA:2026-1348:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1348:01 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 golang.org/x/crypto/ssh: golang:...

7.5CVSS6.5AI score0.00878EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/26 3:16 p.m.•22 views

CVE-2026-17497

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

8.3CVSS0.00749EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/26 2:38 p.m.•22 views

EUVD-2026-49056

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

8.3CVSS6.6AI score0.00749EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/26 2:38 p.m.•8 views

CVE-2026-17497 NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

8.3CVSS6.6AI score0.00749EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/26 2:38 p.m.•17 views

CVE-2026-17497

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

8.3CVSS6.6AI score0.00749EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/26 2:38 p.m.•16 views

CVE-2026-17497 NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

8.3CVSS6.6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/26 2:38 p.m.•56 views

CVE-2026-17497 NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operati...

8.3CVSS0.00749EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/26 2:38 p.m.•67 views

CVE-2026-17497

NoteGen before 0.32.0 allows arbitrary OS command execution via the Tauri shell plugin shell:allow-execute for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript in the app’s webview can invoke plugin:shell|execute to run attacker-controlled command...

8.3CVSS6.6AI score0.00749EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/26 12:00 a.m.•28 views

PT-2026-64812

Name of the Vulnerable Software and Affected Versions NoteGen versions prior to 0.32.0 Description NoteGen grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. This allows JavaScript running in the...

8.3CVSS6.6AI score0.00749EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/25 9:16 a.m.•36 views

CVE-2026-16766

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

9.8CVSS0.02574EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/25 8:12 a.m.•18 views

CVE-2026-16766 Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

5.9AI score0.02574EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/25 8:12 a.m.•21 views

EUVD-2026-48767

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

5.9AI score0.02574EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/25 8:12 a.m.•16 views

CVE-2026-16766 Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

9.8CVSS5.9AI score
SaveExploits0References9
CVE
CVE
•added 2026/07/25 8:12 a.m.•45 views

CVE-2026-16766

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

9.8CVSS5.9AI score0.02574EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/07/25 8:12 a.m.•55 views

CVE-2026-16766 Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

0.02574EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/25 12:00 a.m.•22 views

PT-2026-64476

Name of the Vulnerable Software and Affected Versions Catalyst::View::Wkhtmltopdf versions prior to 0.6.1 Description Shell command injection is possible via PDF render options because options are passed directly to the wkhtmltopdf command without sanitization. Web applications that pass...

9.8CVSS6.5AI score0.02574EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•2 views

CVE-2026-16766: Improper Neutralization of Special Elements used in an OS Command

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the pagesize, orientation or margins...

9.8CVSS5.8AI score0.02574EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/07/24 10:35 p.m.•11 views

@rse/claudex (>=0.9.22, <=1.0.10), snyk-gradle-plugin (>=6.0.0, <=7.1.0) potentially affected by unknown CVE via shescape (>=2.1.11, <=2.1.12)

shescape NPM version =2.1.11, =0.9.22, =6.0.0, =7.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-SHESCAPE-18319522...

5.4AI score
SaveExploits0
OSV
OSV
•added 2026/07/24 10:34 p.m.•17 views

GHSA-Q53C-4PRM-W95Q Shescape: Home-directory disclosure in assignment context on Unix with Dash

Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Dash, or true when the default shell is Dash, using the escape and escapeAll APIs in assignments prefixed to a command. An attacker may be able to obtain the location of the home directory and, depending on h...

6.3CVSS5.8AI score0.0059EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2026/07/24 10:34 p.m.•35 views

Shescape: Home-directory disclosure in assignment context on Unix with Dash

Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Dash, or true when the default shell is Dash, using the escape and escapeAll APIs in assignments prefixed to a command. An attacker may be able to obtain the location of the home directory and, depending on h...

6.3CVSS5.8AI score0.0059EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder