250659 matches found
SUSE CVE-2026-53614
unknown...
CVE-2026-55388 vulnerabilities
Vulnerabilities for packages: kibana, kubeflow-katib, drupal...
GHSA-J3RV-43J4-C7QM vulnerabilities
Vulnerabilities for packages: dependency-track-apiserver, apicurio-registry, s3proxy-fips, commercial-elasticsearch, spark-kubernetes-operator-fips, ruby4.0-jrjackson, airflow, wso2is, spark-kubernetes-operator, cassandra-fips, hono, localstack, elasticsearch, elasticsearch-fips, nacos, nextflow,...
CVE-2026-8664
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction...
CVE-2026-8660
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands...
CVE-2026-54512 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, neo4j, wavefront-proxy, keycloak-config-cli, zookeeper, management-api-for-apache-cassandra-5.0, keycloak, dependency-track, solr, sonarqube, apicurio-registry, ruby4.0-jrjackson, akhq, druid, spark, jenkins, airflow, apache-pulsar, cassandra,...
GHSA-J3RV-43J4-C7QM vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, neo4j, wavefront-proxy, keycloak-config-cli, zookeeper, management-api-for-apache-cassandra-5.0, keycloak, dependency-track, solr, sonarqube, apicurio-registry, ruby4.0-jrjackson, akhq, druid, spark, jenkins, airflow, apache-pulsar, cassandra,...
Malicious code in @su-doughnym/loginui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5768349705baa7b448fddb22d17412ce7befdaedd68b2e91a452eb6521e0bc66 Package self-identifies as a HubSpot dependency-confusion proof-of-concept and is published at version 99.99.99 — a typical high-version-pin used to...
Malicious code in two-factor-prompt-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ebb96758f051c0a5a1c8fe97fb05c898f2489f4567fb64fbd271eb103dcadc Package self-identifies as a dependency-confusion proof-of-concept aimed at an internal/private package name. The postinstall script postinstall.js...
CVE-2026-44168
A flaw was found in MariaDB. During a State Snapshot Transfer SST, the donor node improperly validates parameters sent by a joiner node. This vulnerability allows a malicious joiner to execute arbitrary shell commands on the donor server through the mariabackup SST method. This could lead to a...
CVE-2026-8658
CVE-2026-8658 describes an OS Command Injection in the Rapid7 InsightConnect Tcpdump Plugin running on Linux, caused by insufficient input sanitization during shell command construction. The vulnerability affects the plugin’s handling of options and filter parameters, allowing an authenticated at...
EUVD-2026-39161
OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, maxttl, count, or timeout request parameters due to insufficient input validation when constructing shell...
CVE-2026-8666
OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, maxttl, count, or timeout request parameters due to insufficient input validation when constructing shell...
CVE-2026-8592
The vulnerability CVE-2026-8592 affects the Rapid7 InsightConnect AWK Plugin (Linux) where the process_string action constructs shell commands unsafely in the processing pipeline, enabling OS command execution via text or expression parameters. This is a remote issue with potential impact on conf...
CVE-2026-8660
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands...
CVE-2026-8660 OS Command Injection in Rapid7 InsightConnect Ping Plugin
OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host parameter due to insufficient input validation when constructing shell commands...
EUVD-2026-39148
Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing...
EUVD-2026-39116
ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the...
EUVD-2026-39149
Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must vis...