473100 matches found
CVE-2026-76228
A flaw was found in Renovate. This command injection vulnerability occurs when Renovate processes Gradle Wrapper updates. An attacker can introduce a malicious gradle-wrapper.properties file into a scanned repository, where a specially crafted distributionUrl containing shell command substitution...
CVE-2026-70957
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70956
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70832
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:44+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70951
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-62536
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-75149 marimo < 0.23.15 Code Injection via MCP Server Configuration
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...
EUVD-2026-62665
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...
CVE-2026-75149
The marimo Python notebook framework (versions before 0.23.15) launches attacker-controlled commands embedded in a notebook's MCP server configuration as local subprocesses upon opening in edit mode, requiring no authentication or cell execution. CVSS 3.1 scores this HIGH (8.8). Upgrade to 0.23.1...
CVE-2026-75149 marimo < 0.23.15 Code Injection via MCP Server Configuration
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...
CVE-2026-71150
creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:35+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-62545
creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:28+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70736
creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70735
creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70973
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61265
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70881
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71056
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...