41708 matches found
CVE-2026-73651 vulnerabilities
Vulnerabilities for packages: redisinsight...
CVE-2026-73680
Cockpit CMS 2.14.0 and earlier exposes a command-injection vulnerability in the FFmpeg integration. An authenticated user with assets/upload can upload a video file whose filename contains shell metacharacters; the unsanitized filename is interpolated into a shell command executed via Process::fr...
CVE-2026-73680
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...
EUVD-2026-58799
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...
CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename
Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...
Malicious code in datefmt-core-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360a94a10ce13edded9e4a99c7c01de1ebfdd73a9af4ec49260f2cec165a609b The package advertises itself as a date-formatting utility but ships a postinstall.js that npm auto-executes on install via scripts.postinstall...
MAL-2026-14031 Malicious code in datefmt-core-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360a94a10ce13edded9e4a99c7c01de1ebfdd73a9af4ec49260f2cec165a609b The package advertises itself as a date-formatting utility but ships a postinstall.js that npm auto-executes on install via scripts.postinstall...
Malicious code in datefmt-simple-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...
MAL-2026-14032 Malicious code in datefmt-simple-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...
GO-2023-1730 vulnerabilities
Vulnerabilities for packages: hubble-ui...
GO-2024-3269 vulnerabilities
Vulnerabilities for packages: gh...
GO-2024-3296 vulnerabilities
Vulnerabilities for packages: gh...
GO-2025-3467 vulnerabilities
Vulnerabilities for packages: gh...
GO-2026-4408 vulnerabilities
Vulnerabilities for packages: wolfictl...
GO-2021-0227 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2022-0615 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2022-0956 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2024-2617 vulnerabilities
Vulnerabilities for packages: k3d...