Lucene search
+L

9575 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 2:59 p.m.•18 views

CVE-2026-31862

Cloud CLI aka Claude Code UI is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.24.0, multiple Git-related API endpoints use execAsync with string interpolation of user-controlled parameters file, branch, message, commit, allowing authenticated attackers to...

9.1CVSS6.7AI score0.00454EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/03/26 2:43 p.m.•23 views

SUSE CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.4CVSS6.9AI score0.0043EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/03/26 12:00 a.m.•31 views

Ruckus Wireless’ various products have security vulnerabilities

Ruckus Wireless SmartZone is a high-performance WLAN controller from Ruckus Technologies. Several products of Ruckus Wireless have security vulnerabilities. These vulnerabilities stem from arbitrary file reading vulnerabilities in the command-line interface, which could allow authenticated remote...

6.9CVSS6.2AI score0.00465EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/26 12:00 a.m.•7 views

CVE-2021-4474: Files or Directories Accessible to External Parties

Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges to read arbitrary files from the underlying filesystem. Attackers can exploit this vulnerability to access sensitive...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/03/26 12:00 a.m.•21 views

vulnx 2.0.0

vulnx is a command-line interface CLI tool designed to provide a structured and easily navigable interface to various vulnerability databases...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/03/26 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-33247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run wi...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/25 9:31 p.m.•21 views

CVE-2026-33247

A flaw was found in NATS-Server. If the NATS-Server is configured with static credentials provided through command-line arguments argv and the monitoring port is enabled, a remote attacker with access to the monitoring port can view these credentials. The /debug/vars endpoint on the monitoring po...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits0References5
NVD
NVD
•added 2026/03/25 8:16 p.m.•36 views

CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS0.0043EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/03/25 8:16 p.m.•18 views

CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/03/25 8:02 p.m.•29 views

CVE-2026-33247 NATS credentials are exposed in monitoring port via command-line argv

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.4CVSS6.3AI score
SaveExploits0References10
Debian CVE
Debian CVE
•added 2026/03/25 8:02 p.m.•26 views

CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/03/25 8:02 p.m.•40 views

CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/03/25 8:02 p.m.•16 views

CVE-2026-33247

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, if a nats-server is run with static credentials for all clients provided via argv the command-line, then those credentials are visible to any user who can see the...

7.4CVSS7AI score0.0043EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/03/25 8:02 p.m.•128 views

CVE-2026-33247

CVE-2026-33247 affects the NATS-Server (NATS.io). Prior to versions 2.11.15 and 2.12.6, running nats-server with static credentials provided via argv causes those credentials to be visible to any user who can see the monitoring port; the /debug/vars endpoint exposes an unredacted argv. A fix is a...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits0References8Affected Software1
GithubExploit
GithubExploit
•added 2026/03/25 4:21 p.m.•171 views

NightOwl

NightOwl Advanced Penetration Testing Framework A modula...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/03/25 4:16 p.m.•29 views

CVE-2026-20110

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because incorrect privileges are associated with the start maintenance command. An attacker could exploit th...

6.5CVSS0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 10:27 a.m.•72 views

CVE-2026-23374

CVE-2026-23374 affects the Linux kernel blktrace path. The root cause is tracing_record_cmdline() using __this_cpu_read()/__this_cpu_write() on a per-CPU variable while preemption is enabled, which is unsafe and triggers a kernel BUG in preemptible code through __blk_add_trace() paths. Public wri...

5.5CVSS6AI score0.00124EPSS
SaveExploits0References6Affected Software1
osv_bit
osv_bit
•added 2026/03/25 8:44 a.m.•24 views

BIT-LIBPYTHON-2026-4519 webbrowser.open() allows leading dashes in URLs

The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open...

6.6AI score0.00314EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/03/25 12:24 a.m.•19 views

SUSE CVE-2026-31863

Anytype Heart is the middleware library for Anytype. The challenge-based authentication for the local gRPC client API can be bypassed, allowing an attacker to gain access without the 4-digit code. This vulnerability is fixed in anytype-heart 0.48.4, anytype-cli 0.1.11, and Anytype Desktop 0.54.5...

4.4CVSS8.1AI score0.00111EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•38 views

PT-2026-27794

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the Cisco IOS XE Software Command Line Interface CLI that could allow a local, authenticated attacker to trigger a denial of service DoS condition on a vulnerab...

6.5CVSS5.9AI score0.00133EPSS
SaveExploits0References5
Rows per page
Query Builder