158246 matches found
EUVD-2026-57696
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open of the output path in topdf and of stylesheet paths in styletagfor. topdf reads the generated PDF back from its path argument, and styletagfor reads each entry of the stylesheets list, by assigning the path to a...
CVE-2026-17431
PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open of the output path in topdf and of stylesheet paths in styletagfor. topdf reads the generated PDF back from its path argument, and styletagfor reads each entry of the stylesheets list, by assigning the path to a...
PT-2026-71924
Name of the Vulnerable Software and Affected Versions OpenChoreo versions 1.2.0-rc.1 through 1.2.0 Description An authorization flaw exists in the openchoreo-api where the system uses a caller-supplied project query parameter instead of the comp.Spec.Owner.ProjectName to authorize component:exec...
PT-2026-71886
Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 17.0.9 Description The UCP Node server on ports 8001 and 8003 utilizes io.usecheckAuth in node/lib/server.js. However, Socket.IO version 4 only applies this middleware to the default namespace. This allows an...
PT-2026-71628
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description Multiple command and argument injection issues allow attackers to execute arbitrary commands by providing malicious input through various code paths. These paths include the RSYNC CONNECT PROG...
Vim < 9.2.0847 Arbitrary Command Execution (GHSA-r22p-fhw4-84p2)
The version of Vim installed on the remote host is prior to 9.2.0847. It is, therefore, affected by a vulnerability as referenced in the GHSA-r22p-fhw4-84p2 advisory. - runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with...
Adobe ColdFusion 2023.x < 2023 Update 23 / 2025.x < 2025 Update 12 Multiple Vulnerabilities (APSB26-90)
The version of Adobe ColdFusion installed on the remote Windows host is prior to 2023.x update 23 or 2025.x update 12. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-90 advisory. - Improper Neutralization of Special Elements used in an OS Command 'OS Command...
Vim < 9.2.0839 OS Command Injection (GHSA-r5v6-q6j8-8qw2)
The version of Vim installed on the remote host is prior to 9.2.0839. It is, therefore, affected by a vulnerability as referenced in the GHSA-r5v6-q6j8-8qw2 advisory. - The runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled...
Linux Distros Unpatched Vulnerability : CVE-2026-63294
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image o...
PT-2026-71881
FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...
PT-2026-71926
Name of the Vulnerable Software and Affected Versions OpenChoreo versions prior to 1.0.2 OpenChoreo versions prior to 1.1.2 Description Management APIs served by internal/cluster-gateway/server.go on the externally reachable agent listener lack authentication. This allows network-reachable...
VulnCheck KEV: CVE-2025-55583
D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...
VulnCheck KEV: CVE-2025-10123
A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub415028 of the file /goform/setstaticleases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been...
ROS-20260813-73-0003
The vulnerability in podman is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2026-71487
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Untrusted data inclusion in psql COPY may allow a server...
Linux Distros Unpatched Vulnerability : CVE-2026-6464
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If th...
PT-2026-71883
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
Vim < 9.2.0840 Arbitrary Code Execution (GHSA-rcr7-f3wr-22r2)
The version of Vim installed on the remote host is prior to 9.2.0840. It is, therefore, affected by a vulnerability as referenced in the GHSA-rcr7-f3wr-22r2 advisory. - runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and...
Tenable Security Center SCAP Audit File Command Injection
Tenable Security Center prior to 6.9.0 allows an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. Filesystem::saveTmp builds staged upload filenames from the raw client-supplied context form parameter tempnam prefix, which is not...
podman -- podman quadlet install --replace does not fully replace the old file
The Podman developers report: When running podman quadlet install --replace to replace a Quadlet file, if the original Quadlet is larger than the new Quadlet, the file would not be truncated and content from the original would be preserved...