Lucene search
+L

150622 matches found

OSV
OSV
added 2026/07/06 8:3 a.m.6 views

PYSEC-2026-799 ClusterLabs crmsh vulnerable to shell code injection

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call crm history when crm is run were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges...

7.8CVSS6.1AI score0.00675EPSS
SaveExploits1References10
OSV
OSV
added 2026/07/06 8:3 a.m.6 views

PYSEC-2026-792 Cobbler subject to Command Injection

A Command Injection in actionpower.py in Cobbler prior to v2.6.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 username or 2 password fields to the powersystem method in the xmlrpc API...

7.5CVSS7.5AI score0.05555EPSS
SaveExploits1References13
PyPA
PyPA
added 2026/07/06 8:3 a.m.11 views

keycloak-httpd-client-install Insecure Secrets

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...

7.8CVSS6.7AI score0.00378EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/06 8:3 a.m.7 views

PYSEC-2026-828 keycloak-httpd-client-install Insecure Secrets

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...

7.8CVSS5.9AI score0.00378EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/06 6:43 a.m.18 views

Important: Red Hat Security Advisory: ruby:2.5 security update

An update for the ruby:2.5 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

7.6CVSS6AI score0.00783EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/06 6:43 a.m.12 views

ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...

7.1CVSS6.1AI score0.00783EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/06 6:39 a.m.14 views

ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...

7.1CVSS6.1AI score0.00783EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/06 6:31 a.m.7 views

OESA-2026-2879 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...

7.5CVSS6.2AI score0.0039EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/06 6:31 a.m.8 views

OESA-2026-2876 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...

7.5CVSS6.1AI score0.0039EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/06 6:30 a.m.9 views

CVE-2026-14802

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

7.5CVSS6.7AI score0.01324EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/07/06 6:30 a.m.19 views

CVE-2026-14802 react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

6.9CVSS6.7AI score
SaveExploits0References8
CVE
CVE
added 2026/07/06 6:30 a.m.61 views

CVE-2026-14802

CVE-2026-14802 affects react-create-app releases up to 5.0.1 on macOS, targeting the startBrowserProcess function in openBrowser.js within react-dev-utils. The root cause is an input manipulation that enables OS command injection, with remote exploitation described as possible and the exploit pub...

7.5CVSS6.7AI score0.01324EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/07/06 6:30 a.m.12 views

EUVD-2026-41815

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

7.5CVSS5.7AI score0.01324EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/07/06 6:30 a.m.49 views

CVE-2026-14802 react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

7.5CVSS0.01324EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/07/06 6:0 a.m.45 views

CVE-2026-6382 Multiple elFinder Plugins - Authenticated OS Command Injection

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...

0.00902EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/06 6:0 a.m.56 views

CVE-2026-6382

The CVE affects multiple elFinder-based WordPress plugins: FileOrganizer (before 1.1.9), Advanced File Manager (before 5.4.12), File Manager Pro (before 2.1.1), and File Manager (before 8.0.4). The root cause is improper escaping of a parameter passed to a shell command during image operations, e...

9.1CVSS6AI score0.00902EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/06 6:0 a.m.10 views

CVE-2026-6382

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...

9.1CVSS6AI score0.00902EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/06 6:0 a.m.8 views

EUVD-2026-41812

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...

9.1CVSS6AI score0.00902EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/06 3:52 a.m.11 views

ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments

A flaw was found in Net::IMAP, a Ruby library that provides Internet Message Access Protocol IMAP client functionality. This vulnerability allows a remote attacker to inject arbitrary IMAP commands. This is achieved by passing specially crafted symbol arguments to IMAP commands. Successful...

7.1CVSS6AI score0.00783EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/07/06 3:52 a.m.10 views

Important: Red Hat Security Advisory: ruby security update

An update for ruby is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.1CVSS6.4AI score0.01131EPSS
SaveExploits0References4
Rows per page
Query Builder