CVE-2026-18657

An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a maliciously crafted project directory containing an executable that bypasses workspace trust protections when a local user starts Kiro CLI in...

SUSE-SU-2026:3414-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided bsc1272575. - CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument bsc1272582. - CVE-2026-62946: integer...

EUVD-2019-15168

Malware in sbrugna...

EUVD-2018-7726

Malware in sbrugna...

EUVD-2020-27912

Malware in sbrugna...

EUVD-2018-0293

Malware in sbrugna...

EUVD-2019-0240

Malware in sbrugna...

EUVD-2024-2360

Malicious code in bioql PyPI...

EUVD-2024-3409

Malicious code in bioql PyPI...

EUVD-2021-7013

Malicious code in bioql PyPI...

EUVD-2025-15956

Malicious code in bioql PyPI...

EUVD-2025-16493

Malicious code in bioql PyPI...

EUVD-2024-3397

Malicious code in bioql PyPI...

CVE-2025-1753 Command Injection in LLama-Index CLI in run-llama/llama_index

LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this argument can inject and execute arbitrary shell...

OPENSUSE-SU-2025:15006-1 argocd-cli-2.14.10-1.1 on GA media

These are all security issues fixed in the argocd-cli-2.14.10-1.1 package on the GA media of openSUSE Tumbleweed...

AWS CDK CLI prints AWS credentials retrieved by custom credential plugins

Summary The AWS Cloud Development Kit AWS CDK 1 is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. The AWS CDK CLI 2 is a command line tool for interacting with CDK applications. Customers can use the CDK CLI ...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, rancher, zot, flux-source-controller-fips, grype, beats-fips, grype-fips, envoy-gateway-fips, k8ssandra-client, kaniko-fips, cluster-api-helm-controller-fips, docker-cli-buildx-fips, trivy-fips, k8sgpt, kaniko, chainctl, neuvector, grype-db,...

CVE-2025-27622

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not redact encrypted values of secrets when accessing config.xml of agents via REST API or CLI, allowing attackers with Agent/Extended Read permission to view encrypted values of secrets...

PT-2025-9860 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.499 and earlier, LTS versions 2.492.1 and earlier Description: The issue allows attackers with View/Read permission to view encrypted values of secrets when accessing config.xml of views via REST API or CLI. This occurs...

SUSE-SU-2025:0751-1 Security update for azure-cli

This update for azure-cli fixes the following issues: - CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certain service management operations being performed with System level permissions in Azure Defender for Cloud bsc1231971...