Lucene search
+L

8275 matches found

RedHat Linux
RedHat Linux
added 2026/07/08 3:46 p.m.18 views

Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release

The 1.4.2 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.2...

10CVSS6.8AI score0.00813EPSS
SaveExploits0References17
OSV
OSV
added 2026/07/08 3:4 p.m.15 views

MAL-2026-6984 Malicious code in @vite-ln/build-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972bbfdd55ad200dd49b08501d7391beca99841f0c36479806f2b1e329950a2 Package @vite-ln/build-ts copies the legitimate vite package's manifest verbatim description 'Native-ESM powered web dev build tool', author 'Evan...

6.2AI score
SaveExploits0References3
Cloud Foundry
Cloud Foundry
added 2026/07/08 12:0 a.m.11 views

CVE-2026-47826 - blobs.yaml Path Traversal Allows File Writes | Cloud Foundry

HIGH CVSSv4: High 8.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSSv3: High 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH CLI tool – All versions prior to v7.10.4 Description T...

9.1CVSS6AI score0.00344EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.13 views

PT-2026-56586

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 12.1.8 PAN-OS versions prior to 11.2.13 PAN-OS versions prior to 11.1.16 PAN-OS versions prior to 10.2.18-h8 Description A command injection issue exists in the management plane of the software, specifically within the...

8.5CVSS6.2AI score0.01019EPSS
SaveExploits0References6
Cloud Foundry
Cloud Foundry
added 2026/07/08 12:0 a.m.7 views

CVE-2026-47828 - Missing TLS Certificate Verification in BOSH CLI Allows Root Code Execution via Man-in-the-Middle Credential Replay | Cloud Foundry

CVSS Score: High 8.9 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSSv3: High 7.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor BOSH-Ecosystem / BOSH bosh-cli Versions Affected Severity is High unless otherwise noted. bosh-cli – All versions prior to v7.10.4 Description...

8.9CVSS6AI score0.00148EPSS
SaveExploits0
OSV
OSV
added 2026/07/07 8:55 p.m.11 views

CVE-2026-46672 Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `escapeCsv` Helper

Actual is a local-first personal finance app. Prior to 26.6.0, @actual-app/cli ships a hand-rolled CSV serializer in packages/cli/src/output.ts used whenever the global --format csv option is passed, whose escapeCsv helper only handles RFC 4180 delimiter, quote, and newline escaping and does not...

4.6CVSS6.1AI score
SaveExploits0References6
PyPA
PyPA
added 2026/07/07 4:2 p.m.10 views

LLama-Index CLI OS command injection vulnerability

LLama-Index CLI prior to v0.4.1, corresponding to LLama-Index prior to v0.12.21, contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this...

7.8CVSS7.7AI score0.0103EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/07/07 4:2 p.m.10 views

PYSEC-2026-1206 AWS SAM CLI Path Traversal allows file copy to local cache

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. After completing a build with AWS SAM CLI which include symlinks, the content o...

6.9CVSS6.1AI score0.0062EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/07 3:26 p.m.9 views

GO-2026-5811 turso-cli persists Turso platform JWT with world-readable (0o644) file permissions in github.com/tursodatabase/turso-cli

turso-cli persists Turso platform JWT with world-readable 0o644 file permissions in github.com/tursodatabase/turso-cli...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/07 3:6 p.m.24 views

Malicious code in base58-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7d188e2cd79918987f2008e93bb80ea9979d791b357f8f7cfd892321ded6c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References7
OSV
OSV
added 2026/07/07 3:6 p.m.21 views

MAL-2026-6918 Malicious code in base58-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7d188e2cd79918987f2008e93bb80ea9979d791b357f8f7cfd892321ded6c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

6.1AI score
SaveExploits0References7
OSV
OSV
added 2026/07/07 2:34 p.m.8 views

PYSEC-2026-1147 Apache Airflow Fab Provider Insufficient Session Expiration vulnerability

Insufficient Session Expiration vulnerability in Apache Airflow Fab Provider. This issue affects Apache Airflow Fab Provider: before 1.5.2. When user password has been changed with admin CLI, the sessions for that user have not been cleared, leading to insufficient session expiration, thus logged...

2.1CVSS5.9AI score0.00954EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 2:34 p.m.10 views

PYSEC-2026-1753 ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

Summary The issue here is that we pass the secret content as one of the args via CLI. This issue may affect any of our charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processing subprocess.CalledProcessError. There are two points that may log this command, in...

6.9CVSS5.9AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 12:32 p.m.4 views

SUSE-SU-2026:22566-1 Security update for jq

This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in jvstringempty can lead to heap buffer overflow and a crash when processing crafted input bsc1244116. - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad...

8.7CVSS6.3AI score0.00559EPSS
SaveExploits10References23
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/07 12:2 p.m.24 views

Malicious code in shopify-cli-extensions (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSV
OSV
added 2026/07/07 12:2 p.m.10 views

MAL-2026-8632 Malicious code in shopify-cli-extensions (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSV
OSV
added 2026/07/07 12:2 p.m.7 views

MAL-2026-8631 Malicious code in shopify-cli-dependencies (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/07 12:2 p.m.10 views

Malicious code in shopify-cli-dependencies (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
NOZOMI
NOZOMI
added 2026/07/07 12:0 a.m.11 views

Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0

Summary An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. Impact An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration,...

8.1CVSS6AI score0.0021EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-13769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file...

6.8CVSS5.4AI score0.00118EPSS
SaveExploits0References2
Rows per page
Query Builder