Lucene search
+L

2554530 matches found

Cvelist
Cvelist
added 2026/08/21 8:30 a.m.29 views

CVE-2026-47359 Apache CloudStack: OS Command Injection due to unsanitized mount command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API available since 4.20.0.0 and updateBackupRepository API introduced in 4.22.0.0 accept unsanitized command options f...

0.00513EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:30 a.m.12 views

EUVD-2026-63848

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API available since 4.20.0.0 and updateBackupRepository API introduced in 4.22.0.0 accept unsanitized command options f...

5.8AI score0.00513EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 8:29 a.m.33 views

CVE-2026-50112 Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates

SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secondary Storage VM will retrieve the data and persist it as a template file, which can later be downloaded through normal...

0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:29 a.m.40 views

CVE-2026-50112

Apache CloudStack versions 4.14.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by two related vulnerabilities in template download handling. When a tenant registers a VM template with directDownload=true pointing to a .metalink file, the management server fetches the metalink XML...

8.8CVSS5.9AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/21 8:29 a.m.6 views

CVE-2026-50112 Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates

SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secondary Storage VM will retrieve the data and persist it as a template file, which can later be downloaded through normal...

5.9AI score0.00316EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:29 a.m.11 views

EUVD-2026-63847

SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secondary Storage VM will retrieve the data and persist it as a template file, which can later be downloaded through normal...

8.8CVSS5.9AI score0.00316EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/21 8:28 a.m.9 views

WordPress W3 Total Cache plugin < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key vulnerability

Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key vulnerability discovered by Jakub Herman in WordPress Plugin W3 Total Cache versions 2.10.5...

10CVSS5.3AI score0.00429EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/08/21 8:25 a.m.6 views

CVE-2026-61400 Apache CloudStack: Get and Run Diagnostics Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs and virtual routers. An authenticated user holding the permissions required to invoke either getDiagnosticsData or...

6.1AI score0.01192EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 8:25 a.m.29 views

CVE-2026-61400

Apache CloudStack is affected by a command injection vulnerability in the getDiagnosticsData and runDiagnostics APIs used for system VM and Virtual Router diagnostics. An authenticated user with Admin role permissions can achieve arbitrary command execution as root on the affected instances, resu...

8.8CVSS6.1AI score0.01192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 8:25 a.m.35 views

CVE-2026-61400 Apache CloudStack: Get and Run Diagnostics Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs and virtual routers. An authenticated user holding the permissions required to invoke either getDiagnosticsData or...

0.01192EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 8:25 a.m.10 views

EUVD-2026-63837

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache CloudStack's run and get diagnostics functionality for the system VMs and virtual routers. An authenticated user holding the permissions required to invoke either getDiagnosticsData or...

8.8CVSS6.1AI score0.01192EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/21 8:23 a.m.5 views

CVE-2026-74554

A flaw was found in the Linux kernel's ath12k Wi-Fi driver. An out-of-bounds write vulnerability exists in the ath12kmacdppeercleanup function. This issue occurs due to incorrect indexing of a bitmap, leading to memory corruption adjacent to the bitmap. This could allow a malicious Wi-Fi peer to...

8.8CVSS6AI score0.00204EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 8:23 a.m.7 views

CVE-2026-74533

A flaw was found in the Bluetooth ISO subsystem of the Linux kernel. This vulnerability is caused by a race condition where certain data is accessed and modified without proper synchronization, leading to a use-after-free UAF error. An attacker could potentially exploit this to execute arbitrary...

8.8CVSS6.1AI score0.00218EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/21 8:20 a.m.9 views

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-42577 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to...

9.6CVSS7.1AI score0.00655EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/21 8:19 a.m.9 views

Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

6.2AI score
SaveExploits0References3
OSV
OSV
added 2026/08/21 8:19 a.m.7 views

MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

6.3AI score
SaveExploits0References3
NVD
NVD
added 2026/08/21 8:16 a.m.7 views

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

9.8CVSS0.00481EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/21 8:16 a.m.6 views

CVE-2026-73537

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS0.00186EPSS
SaveExploits0References2
NCSC
NCSC
added 2026/08/21 8:16 a.m.10 views

Splunk Enterprise’s vulnerabilities are exploited through Splunk

Splunk has identified several vulnerabilities in Splunk Enterprise, particularly in versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. These vulnerabilities include: - Inadequate enforcement of authentication and authorization checks in REST APIs, allowing unauthorized users to access sensitiv...

9.4CVSS6.3AI score0.00666EPSS
SaveExploits0References2
NCSC
NCSC
added 2026/08/21 8:13 a.m.10 views

Several vulnerabilities exist in IBM AIX and IBM PowerVM VIOS.

IBM has hidden vulnerabilities in AIX and PowerVM VIOS. Additionally, IBM has also hidden previous vulnerabilities in products such as DB2, WebSphere, Oracle products like Java and GraalVM, PostgreSQL, OpenSSH, and Perl, for products produced for use with AIX. A malicious individual could exploit...

9.9CVSS7.1AI score0.01904EPSS
SaveExploits9References1
Rows per page
Query Builder