CVE-2026-29955

Vulnerabilità di Iniezione di Comandi nel KubeconfigGenerator di KubePlus Questa vulnerabilità esiste nel componente kubeconfiggenerator di KubePlus e consente ad attaccanti con accesso all'interfaccia HTTP di iniettare comandi shell tramite il parametro chartName, eseguire codice arbitrario come...

CVE-2026-29955

The /registercrd endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses subprocess.Popen with shell=True parameter to execute shell commands, and the user-supplied chartName parameter is directly concatenated into the command string...

EUVD-2026-22037

The /registercrd endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses subprocess.Popen with shell=True parameter to execute shell commands, and the user-supplied chartName parameter is directly concatenated into the command string...

CVE-2010-4828

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...