Lucene search
+L

42731 matches found

osv_ubuntu
osv_ubuntu
•added 2026/06/28 3:16 p.m.•29 views

UBUNTU-CVE-2026-13500

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.3CVSS6.8AI score0.00516EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/28 2:15 p.m.•42 views

EUVD-2026-39998

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS6.9AI score0.00516EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/28 2:15 p.m.•18 views

CVE-2026-13500 antlr ANTLR4 Grammar Action Block OutputFile.java code injection

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.00516EPSS
SaveExploits0References5
Mend
Mend
•added 2026/06/28 2:15 p.m.•12 views

CVE-2026-13500

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS6.9AI score0.00516EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/06/28 2:15 p.m.•26 views

CVE-2026-13500

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS6.9AI score0.00516EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/06/28 2:15 p.m.•77 views

CVE-2026-13500 antlr ANTLR4 Grammar Action Block OutputFile.java code injection

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS0.00516EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/28 12:00 a.m.•6 views

CVE-2026-13500: Improper Control of Generation of Code

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS6.9AI score0.00516EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/28 12:00 a.m.•58 views

PT-2026-53111

Name of the Vulnerable Software and Affected Versions ANTLR4 versions prior to 4.13.3 Description An issue exists in the Grammar Action Block Handler component within the file tool/src/org/antlr/v4/codegen/model/OutputFile.java. A remote attacker can perform a manipulation that leads to code...

7.5CVSS7.4AI score0.00516EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/06/28 12:00 a.m.•28 views

Linux Distros Unpatched Vulnerability : CVE-2026-13500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of...

7.5CVSS6.9AI score0.00516EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/06/27 8:18 a.m.•29 views

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

...

8.4CVSS7.7AI score0.00226EPSS
SaveExploits0
Snyk
Snyk
•added 2026/06/26 4:32 p.m.•22 views

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the path parameter in output plugins when using the $tag placeholder. An attacker can overwrite arbitrary files or inject malicious content by sending specially crafted log entries containing path traversal...

9.8CVSS8.3AI score0.01085EPSS
SaveExploits1References3
NVD
NVD
•added 2026/06/26 11:16 a.m.•30 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS0.00309EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/26 10:15 a.m.•20 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS6.2AI score0.00309EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/26 10:15 a.m.•74 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS0.00309EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/26 10:15 a.m.•19 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS6.5AI score0.00309EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/26 10:15 a.m.•71 views

CVE-2025-7958

Summary (CVE-2025-7958): A code injection vulnerability exists in Trellix Network Security CM and NX. A locally authenticated admin user can trigger arbitrary code execution via the web interface and Alert artifact details. The issue is described as enabling remote-like control within the device ...

8.5CVSS6.3AI score0.00309EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/26 10:15 a.m.•43 views

EUVD-2025-210348

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS6.2AI score0.00309EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/26 12:00 a.m.•10 views

CVE-2025-7958: Improper Control of Generation of Code

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS6.3AI score0.00309EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/26 12:00 a.m.•45 views

PT-2026-52689

Name of the Vulnerable Software and Affected Versions Trellix Network Security CM affected versions not specified Trellix Network Security NX affected versions not specified Description A code injection issue allows a locally authenticated admin user to execute arbitrary code via the web interfac...

8.5CVSS6.5AI score0.00309EPSS
SaveExploits0References7
osv_go
osv_go
•added 2026/06/25 10:34 p.m.•37 views

GO-2026-5738 Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour

Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour...

8.1CVSS8.2AI score0.00492EPSS
SaveExploits0References7
Rows per page
Query Builder