12802 matches found
EUVD-2026-27534
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...
CVE-2026-35254
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...
CVE-2026-35254
CVE-2026-35254 affects Oracle OCI CLI (Oracle Open Source Projects) with affected version 3.77. The vulnerability enables an unauthenticated, network-accessible attacker to cause Oracle OCI CLI to place imported files outside the intended directory, indicating a path traversal-like impact. CVSS3....
GHSA-WPQR-6V78-JR5G vulnerabilities
Vulnerabilities for packages: gemini-cli...
benchmark-runner (1.0.664), celium-cli (0.2.1) +56 more potentially affected by CVE-2026-44405 via paramiko (3.5.0)
paramiko PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - benchmark-runner 1.0.664 - celium-cli 0.2.1 - chat-ai-client 0.0.1 - compliance-trestle =3.7.0, =0.1.4, =0.1.2, =0.1.1, =1.0.0, =1.2.6, =1.0.1,...
aztk (>=0.10.0, <=0.10.3), azure-cli (>=2.0.58, <=2.0.66) +74 more potentially affected by CVE-2026-44405 via paramiko (2.4.3)
paramiko PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aztk =0.10.0, =2.0.58, =0.2.13, =0.1.0, =0.0.4, =0.5.6rc2, =0.9.191, =0.3.0rc1, =1.0.3, =0.1.0, =5.0.3, =1.2.8, =1.0.5, =0.1.55, =0.1.62 and mor...
bamboo-lib (>=0.0.37, <=0.0.39), debu (>=0.0.3, <=0.1.0) +6 more potentially affected by CVE-2026-44405 via paramiko (2.4.1)
paramiko PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - bamboo-lib =0.0.37, =0.0.3, =0.0.1, =0.0.7, =0.2.0, =0.2.1 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...
proxmox-pci-switcher (>=0.10.12, <=0.12.0), supercharged-cli (>=0.0.1, <=0.0.11) potentially affected by CVE-2026-44405 via paramiko (2.10.2)
paramiko PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - proxmox-pci-switcher =0.10.12, =0.0.1, =0.0.11 Source cves: CVE-2026-44405 Source advisory: OSV:GHSA-R374-RXX8-8654...
CVE-2026-35254: Improper Limitation of a Pathname to a Restricted Directory
Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with network access to compromise Oracle OCI CLI. Successful attacks of this vulnerability can result in...
PT-2026-37373
Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability allows unauthenticated attacker to compromise Oracle Cloud Native Environment Command Line...
Oracle OCI CLI 路径遍历漏洞
Oracle OCI CLI is a cloud infrastructure management command-line tool developed by Oracle Corporation in the United States. Version 3.77 of Oracle OCI CLI contains a path traversal vulnerability. This vulnerability allows unauthorized attackers to access the system through the network, enabling...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +283 more potentially affected by CVE-2026-24120 via vm2 (>=3.0.0, <=3.10.4)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +4 more potentially affected by CVE-2026-6322 via fast-uri (>=3.0.1, <=3.1.0)
fast-uri NPM version =3.0.1, =0.3.1, =5.4.3, =1.0.0, =1.0.0, =2.2.0, =2.3.1 Source cves: CVE-2026-6322 Source advisory: MEND:CVE-2026-6322...
PT-2026-37362
These are all security issues fixed in the cf-cli-8.18.3+git.0.83ce51d9c-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10688-1 cf-cli-8.18.3+git.0.83ce51d9c-1.1 on GA media
These are all security issues fixed in the cf-cli-8.18.3+git.0.83ce51d9c-1.1 package on the GA media of openSUSE Tumbleweed...
@arnica-io/dependency-scan (>=1.0.30, <=1.0.33), @herodevs/cli (>=1.0.0-beta.2, <=2.0.0-beta.4) +2 more potentially affected by unknown CVE via @cyclonedx/cdxgen (>=10.11.0, <=11.11.0)
@cyclonedx/cdxgen NPM version =10.11.0, =1.0.30, =1.0.0-beta.2, =0.10.0, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: SNYK:JS-CYCLONEDXCDXGEN-16635345...
aperture-cli (>=0.0.0.dev1, <=1.0.0), aperturelib (>=0.0.0.dev1, <=1.0.0) +27 more potentially affected by CVE-2026-42308 via pillow (5.0.0)
pillow PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aperture-cli =0.0.0.dev1, =0.0.0.dev1, =0.0.1.dev1, =0.0.2, =0.2.0, =0.1.2, =0.1.9, =0.1.0, =1.0.0, =0.7.0, =0.9.8, =1.0.1, =1.0.2.post2 and more...
@diplodoc/algolia (>=0.1.0, <=0.4.1), @diplodoc/algolia-extension (>=0.4.1, <=0.6.1) +1 more potentially affected by CVE-2026-40201 via @diplodoc/search-extension (1.2.2)
@diplodoc/search-extension NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on @diplodoc/search-extension and may be impacted: - @diplodoc/algolia =0.1.0, =0.4.1, =0.0.0-rc-add-filemeta-to-boost-testing-202410220924, =5.0.0-alpha-8 Source...
