Lucene search
+L

72881 matches found

EUVD
EUVD
added 2026/07/03 12:41 p.m.18 views

EUVD-2026-41537

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special Elements used in an OS command 'OS...

6.5CVSS6AI score0.01052EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/03 12:34 p.m.39 views

CVE-2026-54483

CVE-2026-54483 affects Dell PowerProtect Data Domain: versions 7.7.1.0–8.6, LTS2026 8.6.1.0–8.6.1.10, LTS2025 8.3.1.0–8.3.1.30, and LTS2024 7.13.1.0–7.13.1.70. The vulnerability is described as OS command injection caused by improper neutralization of special elements in certain OS commands. A hi...

6.7CVSS6AI score0.00451EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/03 12:34 p.m.17 views

EUVD-2026-41536

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command 'OS...

6.7CVSS6AI score0.00451EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/03 12:34 p.m.48 views

CVE-2026-54483

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command 'OS...

6.7CVSS0.00451EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/03 11:16 a.m.5 views

ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...

7.1CVSS6.2AI score0.00783EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/03 9:43 a.m.2 views

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...

8.4CVSS6.3AI score0.00137EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/03 12:0 a.m.26 views

PT-2026-55544

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain LTS2026 release versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain LTS2025 release versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data...

6.7CVSS6.2AI score0.0046EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/03 12:0 a.m.27 views

PT-2026-55529

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data Domain versions 7.13.1.0 through...

6.5CVSS6.2AI score0.01052EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/07/03 12:0 a.m.14 views

Fortinet FortiSandbox 4.4.x < 4.4.9 OS Command Injection (FG-IR-26-100)

The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9. It is, therefore, affected by a vulnerability: - An improper neutralization of special elements used in an OS command injection vulnerability may allow an attacker to execute unauthorized code or commands...

9.8CVSS9AI score0.9121EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
added 2026/07/03 12:0 a.m.14 views

Fortinet FortiSandbox 4.4.x < 4.4.9 / 5.0.x < 5.0.6 Multiple Vulnerabilities

The version of Fortinet FortiSandbox installed on the remote host is 4.4.x prior to 4.4.9 or 5.0.x prior to 5.0.6. It is, therefore, affected by multiple vulnerabilities: - An OS command injection vulnerability may allow an unauthenticated attacker to execute unauthorized commands via specificall...

9.8CVSS8.9AI score0.73603EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2026/07/03 12:0 a.m.19 views

AlmaLinux 8 : ruby:3.3 (ALSA-2026:33515)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33515 advisory. ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses CVE-2026-42245 ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol...

7.6CVSS6AI score0.00783EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/03 12:0 a.m.13 views

Ubiquiti UniFi OS < 5.1.12 Multiple Vulnerabilities

According to its self-reported version, the remote Ubiquiti UniFi OS device is prior to 5.1.12. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make...

10CVSS7.3AI score0.86958EPSS
SaveExploits4References4
Positive Technologies
Positive Technologies
added 2026/07/03 12:0 a.m.21 views

PT-2026-55547

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data Domain versions 7.13.1.0 through...

7.2CVSS6.2AI score0.01216EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2026/07/03 12:0 a.m.13 views

Oracle Linux 9 : ruby:3.3 (ELSA-2026-33576)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33576 advisory. - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in...

7.6CVSS6AI score0.00783EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/07/02 8:17 p.m.42 views

NPM: 9router: Missing Authorization and OS Command Injection

NPM: 9router: Missing Authorization and OS Command Injection vulnerability discovered by ? in WordPress Npm 9router versions 0.4.44...

9.8CVSS5.9AI score0.01338EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/02 7:22 p.m.7 views

GHSA-V5FF-XMFP-P245 electerm has Command Injection in File System Operations (rmrf, mv, cp)

Impact A command injection vulnerability exists in electerm's file system operations rmrf, mv, cp in src/app/lib/fs.js. These functions construct shell commands by interpolating file paths directly into command strings without escaping shell metacharacters. Vulnerable functions: - rmrf - Uses rm...

8.8CVSS6.2AI score0.00072EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/02 7:16 p.m.11 views

GHSA-VV65-F55V-XM6G Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)

Summary The default git executor used for all worktree operations spawns git through a shell, and the untrusted task branch name flows into the command unsanitized. A caller able to reach the PowerLine SpawnSession RPC a malicious or compromised agent acting through the orchestration layer, or an...

8.7CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/07/02 6:14 p.m.19 views

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Command injection via dotfiles URI parameter combined with workspace auto-creation Summary The dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a crafted dotfilesuri value for example,...

8.8CVSS6.4AI score0.01354EPSS
SaveExploits0References9Affected Software2
OSV
OSV
added 2026/07/02 6:14 p.m.18 views

GHSA-M3CR-VC2J-PM27 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Command injection via dotfiles URI parameter combined with workspace auto-creation Summary The dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a crafted dotfilesuri value for example,...

8.1CVSS6.4AI score0.01354EPSS
SaveExploits0References9
NVD
NVD
added 2026/07/02 4:16 p.m.13 views

CVE-2026-58455

Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit after an authentication redirect in loader.php combined with unsanitized input passed to shellexec in...

9.8CVSS0.04856EPSS
SaveExploits0References2
Rows per page
Query Builder