97100 matches found
NewStart CGSL MAIN 7.02 : vim Multiple Vulnerabilities (NS-SA-2026-0107)
The remote NewStart CGSL host, running version MAIN 7.02, has vim packages installed that are affected by multiple vulnerabilities: - Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault SEGV exist in Vim's swap file...
EulerOS 2.0 SP12 : perl-GD (EulerOS-SA-2026-3292)
"According to the versions of the perl-GD package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle...
Oracle Linux 10 : ELSA-2026-65162-0: / gpsd (ELSA-2026-651620)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-651620 advisory. 3.26.1-3.0.1.el102.2 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.2 - fix another command injection in gpsprof CVE-2026-60122 Tenable has...
CVE-2026-81349: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
CVE-2026-61517: Improper Neutralization of Special Elements used in an OS Command
Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...
CVE-2026-82004: Improper Neutralization of Special Elements used in an OS Command
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...
CVE-2026-78630: Improper Neutralization of Special Elements used in an OS Command
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
PT-2026-87014
OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, fr...
PT-2026-87096
Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as root by injecting into the IpAddr parameter. The parameter is interpolated directly into a...
PT-2026-88109
Name of the Vulnerable Software and Affected Versions Microsoft Azure CLI affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to execute arbitrary code over a network. Recommendations ...
PT-2026-88064
Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to disclos...
PT-2026-88290
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...
EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-3393)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...
RHEL 9 : redhat-ds:12 (RHSA-2026:64779)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64779 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...
EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-3257)
According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...
Cron Job Injection in Remote Backup
An Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability CWE-77 in FortiSandbox may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests...
CVE-2026-81380: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
RHEL 9 : redhat-ds:12 (RHSA-2026:64782)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64782 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol LDAP...
RHEL 9 : redhat-ds:12 (RHSA-2026:64780)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64780 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...
