Lucene search
K

86 matches found

CNVD
CNVD
added 2026/02/05 12:0 a.m.2 views

Apache Continuum Command Injection Vulnerability

Apache Continuum is a continuous integration server from the Apache Foundation. Apache Continuum suffers from a command injection vulnerability that stems from improper neutralization of special elements in commands, which can be exploited by an attacker to invoke arbitrary commands on the server...

9.9CVSS6.1AI score0.31155EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/27 3:23 p.m.3 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.31155EPSS
Exploits0References1
OSV
OSV
added 2026/01/26 12:30 p.m.1 views

GHSA-77P9-W6PJ-RMVG Apache Continuum vulnerable to Command Injection through Installations REST API

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the Installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.31155EPSS
Exploits0References4
Snyk
Snyk
added 2026/01/26 12:30 p.m.4 views

Arbitrary Command Injection

Overview org.apache.continuum:continuum is an Apache Continuum is an enterprise-ready continuous integration server with features such as automated builds, release management, role-based security, and integration with popular build tools and source control management systems. Affected versions of...

9.9CVSS6.1AI score0.31155EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/01/26 12:30 p.m.8 views

Apache Continuum vulnerable to Command Injection through Installations REST API

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the Installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.31155EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/01/26 12:15 p.m.3 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score
Exploits0References2
NVD
NVD
added 2026/01/26 12:15 p.m.6 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS0.31155EPSS
Exploits0References2
CVE
CVE
added 2026/01/26 11:29 a.m.13 views

CVE-2016-15057

CVE-2016-15057 describes an improper neutralization of special elements in Apache Continuum that enables a Command Injection via the Installations REST API. Affected are all versions of Apache Continuum, and exploitation would allow an attacker to invoke arbitrary commands on the server without u...

9.9CVSS5.9AI score0.31155EPSS
In wildExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/26 11:29 a.m.4 views

CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.31155EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/26 11:29 a.m.4 views

CVE-2016-15057 Apache Continuum: Command injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

5.9AI score0.31155EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/26 11:29 a.m.3 views

EUVD-2016-10802

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS5.9AI score0.31155EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/26 12:0 a.m.2 views

Apache Continuum 安全漏洞

Apache Continuum is a continuous integration server from the Apache Foundation. Apache Continuum suffers from a command injection vulnerability that stems from improper neutralization of special elements in commands, which can be exploited by an attacker to invoke arbitrary commands on the server...

9.9CVSS5.9AI score0.31155EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.5 views

PT-2026-4763

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

5.9AI score0.31155EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/01/26 12:0 a.m.2 views

VulnCheck KEV: CVE-2016-15057

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arbitrary commands on the...

9.9CVSS6AI score0.31155EPSS
In wildExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 9:59 a.m.4 views

CVE-2020-7482

A CWE-79:Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists Andover Continuum All versions, which could cause a Reflective Cross-site Scripting XSS attack when using the products' web server...

6.1CVSS6.6AI score0.00317EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-16407

Malware in sbrugna...

6.1CVSS6.3AI score0.00301EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-28607

Malware in sbrugna...

6.1CVSS6.3AI score0.00317EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2010-3447

Malware in sbrugna...

6.8CVSS6.1AI score0.03242EPSS
Exploits4References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-28605

Malware in sbrugna...

9.8CVSS9.2AI score0.00571EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-28606

Malware in sbrugna...

6.1CVSS6.3AI score0.00317EPSS
Exploits0References2
Rows per page
Query Builder