CVE-2026-45293

WordPress Coding Standards (WordPressCS) contains a vulnerability in the WordPress.WP.EnqueuedResourceParameters sniff. From 0.14.1 to 3.4.1, the sniff reconstructed the $ver argument passed to functions like wp_enqueue_script() and ran it through eval() inside is_falsy(), so a crafted argument s...

OS Command Injection

snyk-php-plugin is vulnerable to OS Command Injection. The vulnerability is due to improper handling of the current working directory name, allowing code injection if Snyk test is run inside an untrusted PHP project...

CVE-2024-48963

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...

CVE-2022-22246

A PHP Local File Inclusion LFI vulnerability in the J-Web component of Juniper Networks Junos OS may allow a low-privileged authenticated attacker to execute an untrusted PHP file. By chaining this vulnerability with other unspecified vulnerabilities, and by circumventing existing attack...

PT-2022-5296 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.1R3-S9 Junos OS versions 19.2 prior to 19.2R3-S6 Junos OS versions 19.3 prior to 19.3R3-S6 Junos OS versions 19.4 prior to 19.4R2-S7 Junos OS versions 19.4 prior to 19.4R3-S8 Junos OS versions 20.1 prior to...