157146 matches found
PT-2026-72280
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdna drm submit execbuf passes the user-supplied command BO handle straight into amdxdna cmd submit with drv cmd == NULL. When the handle is AMDXDNA INVALID BO...
PT-2026-72896
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAW PRIMITIVES header size before division vmw cmd draw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...
PT-2026-72825
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd mbox failure hns roce cmd mbox is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns roce cmd mbox failure will cause log flood...
PT-2026-79246
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fai...
Linux Distros Unpatched Vulnerability : CVE-2026-72075
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix race condition in resetdevice sysfs callback The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex...
Linux Distros Unpatched Vulnerability : CVE-2026-72086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: xen: scsiback: Free the command tag on the TMR submit-failure path scsibackdeviceaction obtains a command tag in scsibackgetpendreq and submits a...
GHSA-49MQ-FC6Q-3H46 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Summary token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. The get-user-info operation accepts a user-controlled username argument and later interpolates it into a shell command executed through execAsync: ts getent passwd "$username" || grep "^$username:" /etc/passw...
CVE-2026-73682
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub...
CVE-2026-50523
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
CVE-2026-73682
CVE-2026-73682 affects Semaphore prior to version 2.18.20. The vulnerability is an OS command injection via the repository handling of git_url, allowing an authenticated project Manager or Owner to trigger remote code execution on the Semaphore server host by crafting a malicious git_url with git...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
EUVD-2026-58809
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
EUVD-2026-58808
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
CVE-2026-50523
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
CVE-2026-50523
CVE-2026-50523 : Microsoft PowerShell is affected by a vulnerability described as improper neutralization of special elements used in a command (command injection), allowing an authorized attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack ...
GHSA-3X6R-WXXG-53VV vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-XHF4-832V-7XCR vulnerabilities
Vulnerabilities for packages: telegraf...