Lucene search
+L

2098 matches found

Cvelist
Cvelist
•added 2026/01/08 2:49 p.m.•87 views

CVE-2026-22034 Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD package

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

9.2CVSS0.00714EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2026/01/08 12:00 a.m.•81 views

Amazon Linux 2023 : php8.1, php8.1-bcmath, php8.1-cli (ALAS2023-2025-1355)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1355 advisory. NOTE: https://github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7NOTE: https://github.com/php/php-src/commit/c5f28c7cf0a052f48e47877c7aa5c5bcc54f1cfcDEBIANBUG: 1123574 CVE-2025-1417...

8.2CVSS6.5AI score0.00697EPSS
SaveExploits4References8
Fedora
Fedora
•added 2026/01/04 12:54 a.m.•21 views

[SECURITY] Fedora 43 Update: doctl-1.148.0-1.fc43

The official command line interface for the DigitalOcean API...

7.8CVSS6.7AI score0.00661EPSS
SaveExploits1
Fedora
Fedora
•added 2026/01/02 12:41 a.m.•13 views

[SECURITY] Fedora 43 Update: gh-2.83.2-1.fc43

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

7.5CVSS6.7AI score0.00661EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2025/12/19 2:46 p.m.•10 views

CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-23

CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-23. A patched version of the package is available...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/12/19 6:30 a.m.•21 views

CVE-2025-68459

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...

8.6CVSS7.7AI score0.01414EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 5:51 a.m.•8 views

CVE-2025-68459

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...

8.6CVSS7.3AI score0.01414EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/12/13 3:49 p.m.•171 views

MicrosoftAmplifierPoC

Microsoft Amplifier RCE PoC Proof of concept demonstrating re...

8.2AI score
SaveExploits0
OSV
OSV
•added 2025/12/10 6:30 p.m.•14 views

GHSA-9P56-P6MW-W8QC Jenkins has a Denial of service vulnerability in HTTP-based CLI

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service...

7.5CVSS7.2AI score0.00563EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•26 views

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins 2.540 and earlier and LTS 2.528.2 and earlier, which stems from not properly...

7.5CVSS7.4AI score0.00563EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/12/10 12:00 a.m.•27 views

The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system arises from an operation where data is written beyond the buffer in memory as a result of executing a certificate request command. Exploiting this vulnerability allows a remote attacker to execute...

7.1CVSS6.2AI score0.00352EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/09 12:00 a.m.•14 views

The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.9AI score0.00622EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/09 12:00 a.m.•15 views

The vulnerability of the Command Line Interface (CLI) of the WatchGuard Fireware operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Command Line Interface CLI of the WatchGuard Fireware operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.9AI score0.00441EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/05 12:31 a.m.•11 views

EUVD-2025-201304

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.This vulnerability affects Fireware OS 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up ...

8.6CVSS7.1AI score0.00622EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/04 10:15 p.m.•15 views

CVE-2025-12195

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.This vulnerability affects Fireware OS 11.0 up to and including 11.12.4+541730, 12.0 up to and includi...

7.2CVSS6AI score0.00691EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/04 9:45 p.m.•9 views

CVE-2025-12196 WatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping Command

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command...

8.6CVSS8AI score0.00622EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/12/01 12:00 a.m.•14 views

The vulnerability of the command-line interface (CLI) of the FortiPAM identity management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of the FortiPAM identity management system is related to the storage of confidential information in an open manner. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to the protected information...

4.6CVSS5.8AI score0.00109EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2025/11/29 4:49 p.m.•26 views

[SECURITY] Fedora 43 Update: pack-0.38.2-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

7.5CVSS6.6AI score0.00661EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/11/25 11:12 a.m.•14 views

Important: Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release of Model Transparency

The Tech Preview release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

9.8CVSS7.2AI score0.0075EPSS
SaveExploits0References4
Snyk
Snyk
•added 2025/11/24 4:24 p.m.•19 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Rows per page
Query Builder