9446 matches found
EUVD-2025-124648
Malicious code in nashira-config-fork-cli npm...
EUVD-2025-115297
Malicious code in cli-start-husky-pyxis npm...
[SECURITY] Fedora 42 Update: xen-4.19.3-8.fc42
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Exiv2 jpegBase::readMetadata() DoS
The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2025-46364
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...
CVE-2025-46364
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...
CVE-2025-46364
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...
CVE-2025-46364
Dell CloudLink, prior to version 8.1.1, is affected by a vulnerability described as a CLI Escape vulnerability that a privileged user with a known password can exploit to gain control of the system. The issue affects the CLI escape mechanism and is documented across several feeds (NVD, Red Hat, C...
[SECURITY] Fedora 43 Update: fastapi-cloud-cli-0.3.1-1.fc43
Deploy and manage FastAPI Cloud apps from the command line...
PT-2025-45137
Name of the Vulnerable Software and Affected Versions Dell CloudLink versions prior to 8.1.1 Description Dell CloudLink versions prior to 8.1.1 have a security issue where a user with elevated privileges and knowledge of the system password can execute a CLI Escape, potentially gaining control of...
Dell CloudLink 安全漏洞
Dell CloudLink is a data encryption and key management system from Dell USA. A command execution vulnerability exists in Dell CloudLink, which could be exploited by an attacker to execute arbitrary commands on the system...
CVE-2025-11953
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
@react-native-community/cli has arbitrary OS command injection
The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
[SECURITY] Fedora 43 Update: skopeo-1.20.0-5.fc43
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
CVE-2025-64348 ELOG configuration file authorization bypass
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute OS commands on the host machine. By default, ELOG is not configured to allow...
[SECURITY] Fedora 42 Update: fluidsynth-2.4.8-2.fc42
FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...
[SECURITY] Fedora 43 Update: fluidsynth-2.4.8-2.fc43
FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...
[SECURITY] Fedora 41 Update: fluidsynth-2.4.8-2.fc41
FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...