Lucene search
+L

32622 matches found

NVD
NVD
added 2026/06/17 6:17 p.m.24 views

CVE-2026-20266

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which construct...

9.1CVSS0.00632EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/17 5:7 p.m.17 views

EUVD-2026-37768

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which construct...

9.1CVSS5.9AI score0.00632EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/17 5:7 p.m.53 views

CVE-2026-20266

Summary: CVE-2026-20266 affects Splunk AI Toolkit

9.1CVSS5.9AI score0.00632EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/06/17 5:7 p.m.27 views

CVE-2026-20266 OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterprise instance. The vulnerability is possible because of an unsafe shell execution pattern in the btool configuration helper, which construct...

9.1CVSS0.00632EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/17 5:4 p.m.35 views

Malicious code in scan-only (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7779ff21d9783e1026e13a7abf65e448c5f3d3d111f3cae539f3690e53a2b4 The CLI binary at bin/scan-only.js, when invoked e.g., via npx scan-only --diagnose, harvests installer-side secrets and ships them to a hardcoded...

6.5AI score
SaveExploits0References16
NVD
NVD
added 2026/06/17 3:17 p.m.15 views

CVE-2026-55748

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability...

6CVSS0.00218EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/17 3:17 p.m.18 views

CVE-2026-55743

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 default Supervised security policy can be bypassed to execute arbitrary OS commands with the privileges of the desktop user...

9.6CVSS0.00388EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/17 2:12 p.m.33 views

CVE-2026-55748

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability...

6CVSS0.00218EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/17 2:12 p.m.13 views

EUVD-2026-37723

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability...

6CVSS5.4AI score0.00218EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/17 2:12 p.m.34 views

CVE-2026-55748

OpenStack Horizon prior to 25.7.4 can generate scripts for downloading OpenStack RC files where a crafted project name containing shell metacharacters is possible. The description notes this as a security hardening opportunity rather than a vulnerability, and the CVSS 3.1 metrics indicate a MEDIU...

6CVSS5.4AI score0.00218EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/17 2:8 p.m.6 views

CVE-2026-55743 OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 default Supervised security policy can be bypassed to execute arbitrary OS commands with the privileges of the desktop user...

9.6CVSS5.7AI score0.00388EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/17 2:8 p.m.15 views

EUVD-2026-37722

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 default Supervised security policy can be bypassed to execute arbitrary OS commands with the privileges of the desktop user. Two flaws in src/openhuman/security/policy.rs combine: 1 isargssafe blocks...

9.6CVSS6.7AI score0.00388EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/17 1:43 p.m.14 views

USN-8447-1 golang-go.crypto vulnerabilities

It was discovered that Go Cryptography did not properly handle SSH global request responses. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-39830 It was discovered that Go Cryptography did not properly verify user presence when using FIDO/U2F security keys...

10CVSS5.7AI score0.00621EPSS
SaveExploits0References8
NVD
NVD
added 2026/06/17 1:20 p.m.13 views

CVE-2026-39598

Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2...

8CVSS0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/17 12:32 p.m.29 views

CVE-2025-59872

Technical details about CVE-2025-59872 are not publicly provided in the supplied documents; monitor for updates.

9.8CVSS6AI score0.00454EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/06/17 10:54 a.m.16 views

CVE-2026-46870

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the...

8.5CVSS0.00311EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/17 10:54 a.m.14 views

CVE-2026-46871

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Shell. Successful attacks...

6.5CVSS0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/17 10:54 a.m.14 views

CVE-2026-46869

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell: Dump and Load. Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Shell...

6.5CVSS0.0018EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/17 10:54 a.m.13 views

CVE-2026-46850

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell for VS Code. The supported version that is affected is 2026.2.0+9.6.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MySQL Shell. While the vulnerability is in...

9.9CVSS0.00521EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/17 10:54 a.m.10 views

UBUNTU-CVE-2026-46869

Vulnerability in the MySQL Shell product of Oracle MySQL component: Shell: Dump and Load. Supported versions that are affected are 8.4.0-8.4.9 and 9.0.0-9.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Shell...

6.5CVSS5.8AI score0.0018EPSS
SaveExploits0References2
Rows per page
Query Builder