Lucene search
+L

92 matches found

OSV
OSV
added 2026/01/26 12:30 p.m.9 views

GHSA-77P9-W6PJ-RMVG Apache Continuum vulnerable to Command Injection through Installations REST API

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the Installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.03797EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/01/26 12:30 p.m.20 views

Apache Continuum vulnerable to Command Injection through Installations REST API

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the Installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.03797EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/01/26 12:15 p.m.11 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.03797EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/26 12:15 p.m.18 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS0.03797EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/01/26 11:29 a.m.12 views

EUVD-2016-10802

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.03797EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/01/26 11:29 a.m.8 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.03797EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/26 11:29 a.m.48 views

CVE-2016-15057

Apache Continuum is affected by a command injection vulnerability due to improper neutralization of special elements in commands. Affected component: Installations REST API (REST API access can be used to invoke arbitrary commands on the server). Impact: potential remote code execution with high ...

9.9CVSS5.9AI score0.03797EPSS
SaveIn wildExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/26 11:29 a.m.10 views

CVE-2016-15057 Apache Continuum: Command injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

5.9AI score0.03797EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/01/26 11:29 a.m.44 views

CVE-2016-15057 Apache Continuum: Command injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

0.03797EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/16 9:30 a.m.14 views

EUVD-2025-34739

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability...

6.5AI score0.00687EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/10/16 9:30 a.m.12 views

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS6.8AI score0.00687EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/10/16 9:15 a.m.11 views

CVE-2025-61581

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS0.00687EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/16 8:40 a.m.4 views

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

6.5AI score0.00687EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/16 8:40 a.m.12 views

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2025-23173

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00561EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-28495

Malicious code in bioql PyPI...

8.8CVSS6.3AI score0.00557EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-1302

Malicious code in bioql PyPI...

5.3CVSS5.5AI score0.01327EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/08/19 11:22 p.m.11 views

SUSE CVE-2025-53192

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue, the OGNL engine parses and evaluates the provided expression with powerful capabilities,...

8.3CVSS7.2AI score0.00557EPSS
SaveExploits0References8
OSV
OSV
added 2025/08/18 8:15 p.m.5 views

DEBIAN-CVE-2025-53192

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

8.8CVSS5.9AI score0.00557EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/18 8:15 p.m.14 views

CVE-2025-53192

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

7.7AI score
SaveExploits0References1
Rows per page
Query Builder