Lucene search
+L

150523 matches found

CBLMariner
CBLMariner
added 2026/07/08 4:2 p.m.9 views

CVE-2026-25681 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-25681 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

6.1CVSS6AI score0.00223EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/07/08 3:52 p.m.9 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate...

8.8CVSS6.1AI score0.00369EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/08 3:46 p.m.19 views

Important: Red Hat Security Advisory: RHTAS 1.4.2 - CLI Stack Release

The 1.4.2 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.2...

10CVSS6.8AI score0.00813EPSS
SaveExploits0References17
EUVD
EUVD
added 2026/07/08 3:32 p.m.16 views

EUVD-2026-42291

An OS command injection vulnerability exists in the sub34984 function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lanipv6prefixlen configuration parameter is not properly sanitized, which could allow an authenticated remo...

7.2CVSS6.2AI score0.00957EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/08 3:32 p.m.9 views

EUVD-2026-42292

An OS command injection vulnerability exists in the startlltd function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The machinename configuration parameter is not properly sanitized, which could allow an authenticated remote...

7.2CVSS6.2AI score0.01522EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/07/08 3:32 p.m.21 views

EUVD-2026-42289

An OS command injection vulnerability exists in the startbonjour function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The wanhostname configuration parameter is not properly sanitized, which could allow an authenticated remot...

7.2CVSS6.2AI score0.00957EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/08 3:26 p.m.7 views

CVE-2026-53951 Copier: trust-prefix bypass via path traversal runs tasks unprompted

Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when the...

8.8CVSS6.2AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/08 3:26 p.m.11 views

CVE-2026-53951

Copier is a library and CLI app for rendering project templates. In versions 9.5.0 through 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when the...

8.8CVSS6.1AI score0.00189EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/07/08 3:16 p.m.12 views

CVE-2026-24700

An OS command injection vulnerability exists in the startlltd function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The machinename configuration parameter is not properly sanitized, which could allow an authenticated remote...

7.2CVSS0.01522EPSS
SaveExploits1References1
NVD
NVD
added 2026/07/08 3:16 p.m.13 views

CVE-2026-24699

An OS command injection vulnerability exists in the sub34984 function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lanipv6prefixlen configuration parameter is not properly sanitized, which could allow an authenticated remo...

7.2CVSS0.00957EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/08 3:16 p.m.15 views

CVE-2026-24697

An OS command injection vulnerability exists in the startbonjour function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The wanhostname configuration parameter is not properly sanitized, which could allow an authenticated remot...

7.2CVSS0.00957EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/08 3:16 p.m.12 views

CVE-2026-24698

An OS command injection vulnerability exists in the savesyslogtofile function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The modelname configuration parameter is not properly sanitized, which could allow an authenticated...

7.2CVSS0.00957EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/08 3:8 p.m.6 views

CVE-2026-54344

ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow interpolates github.event.comment.body directly into a bash conditional in a run step, allowing any GitHub user who can comment on an open pull request with a...

4.7CVSS6.1AI score0.00171EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2026/07/08 2:33 p.m.13 views

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

2.5CVSS6AI score0.00207EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/08 2:16 p.m.12 views

CVE-2026-15035

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

7.8CVSS0.01545EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/08 2:16 p.m.9 views

PYSEC-2026-2089

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

7.8CVSS5.9AI score0.01545EPSS
SaveExploits1References7
NVD
NVD
added 2026/07/08 2:16 p.m.14 views

CVE-2026-15033

A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/packageUtils.js of the component peerDependencies. This manipulation causes os command injection. The attack may be initiated remotely. The...

6.5CVSS0.01067EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/08 2:0 p.m.9 views

EUVD-2026-42271

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

5.3CVSS5.8AI score0.01545EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2026/07/08 2:0 p.m.44 views

CVE-2026-15035 bentoml OpenLLM Model Repository Directory Name common.py async_run_command command injection

A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function asyncruncommand of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement...

5.3CVSS0.01545EPSS
SaveExploits1References7
CVE
CVE
added 2026/07/08 2:0 p.m.34 views

CVE-2026-15035

Bentoml OpenLLM 0.6.30 is affected by a command-injection in async_run_command (src/openllm/common.py, Model Repository Directory Name Handler). The vulnerability stems from manipulation of the cmd argument, enabling local exploitation. Public exploit details exist, and attack requires local acce...

7.8CVSS5.8AI score0.01545EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder