26317 matches found
CVE-2026-72590
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the envvars parameter...
CVE-2026-72579
An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...
EUVD-2026-55233
An OS command injection vulnerability in 4xmen/pm2panel all versions allows an authenticated remote attacker to execute arbitrary system commands on the host. The pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec'pm2 restart ' + id without input...
CVE-2026-72573
CVE-2026-72573 describes an authenticated OS command injection in 4xmen/pm2panel (all versions). The vulnerability arises because the pm2panel.js handler at line 188 passes the unsanitized req.query.id parameter directly to exec('pm2 restart ' + id), without input validation or shell escaping, en...
Astra Linux – Vulnerability in PostgresSQL-15
Lack of validation for multibyte character lengths in PostgreSQL text manipulation allows a database user to execute crafted queries that lead to a buffer overflow. This enables the execution of arbitrary code as the operating system user running the database. Versions prior to PostgreSQL 18.2,...
Astra Linux – Vulnerability in PostgresSQL-15
Lack of type validation for input in the PostgreSQL intarray extension’s selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected...
ROOT-OS-ALPINE-317-CVE-2026-28390 CVE-2026-28390 in openssl - Patched by Root
Root has patched CVE-2026-28390 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
Update of els-os-release
Initial package...
EulerOS 2.0 SP11 : samba (EulerOS-SA-2026-3156)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the 'chec...
Linux Distros Unpatched Vulnerability : CVE-2026-65819
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets befo...
Photon OS 5.0: Perl PHSA-2026-5.0-92-0946
An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
EUVD-2026-54654
Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.3, the Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism as if they were physically scanned, without validating the calling app or prompting the user...
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
ROOT-OS-ALPINE-323-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root
Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-46032 CVE-2026-46032 in linux - Patched by Root
Root has patched CVE-2026-46032 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40303 CVE-2025-40303 in linux - Patched by Root
Root has patched CVE-2025-40303 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68353 CVE-2025-68353 in linux - Patched by Root
Root has patched CVE-2025-68353 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40030 CVE-2025-40030 in linux - Patched by Root
Root has patched CVE-2025-40030 in the linux package for Root:Debian:13. Multiple fixed versions available...