Lucene search
+L

4572 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.10 views

Vim < 9.2.0839 OS Command Injection (GHSA-r5v6-q6j8-8qw2)

The version of Vim installed on the remote host is prior to 9.2.0839. It is, therefore, affected by a vulnerability as referenced in the GHSA-r5v6-q6j8-8qw2 advisory. - The runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled...

8.4CVSS5.9AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71628

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description Multiple command and argument injection issues allow attackers to execute arbitrary commands by providing malicious input through various code paths. These paths include the RSYNC CONNECT PROG...

9.2CVSS5.8AI score0.00515EPSS
SaveExploits0References101
Cvelist
Cvelist
added 2026/08/12 8:41 p.m.25 views

CVE-2026-73425 @astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped

Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify adapter converts each image.remotePatterns entry into a regular expression written to .netlify/v1/config.json under images.remoteimages for Netlify's Image CDN allowlist. In...

3.7CVSS0.00171EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 8:41 p.m.59 views

CVE-2026-73425

CVE-2026-73425 affects Astro with the Netlify adapter prior to 8.1.2. The root cause is in remotePatternToRegex: dots in hostnames are escaped, but pathname metacharacters (., +, ?, (, [) are not escaped, so a restrictive pathname like /img/v1.0/file can match unintended paths. Netlify enforces t...

3.7CVSS5.1AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 7:32 p.m.42 views

CVE-2026-17417

CVE-2026-17417 affects IBM i versions 7.3–7.6. It enables a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in Resource Monitoring and Control. CVSS 3.1 base score 8.8 (NETWORK/LOW, PRIVILEGES REQUIRED: LOW, USER INTERACTION: NONE...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/12 7:32 p.m.12 views

CVE-2026-17417

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/12 7:32 p.m.8 views

EUVD-2026-57517

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 7:32 p.m.13 views

CVE-2026-17417 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 7:32 p.m.30 views

CVE-2026-17417 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS0.00418EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.5 views

PT-2026-71271

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of shell metacharacters. This occurs when the system fails to properly filter or escape special characters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/11 10:17 p.m.5 views

UBUNTU-CVE-2026-5917

libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacters such as...

8.8CVSS6AI score0.00882EPSS
SaveExploits0References4
Wolfi
Wolfi
added 2026/08/11 8:23 p.m.12 views

GHSA-F23P-VX2J-J53R vulnerabilities

Vulnerabilities for packages: langfuse...

5.2AI score
SaveExploits0
OSV
OSV
added 2026/08/11 4:17 p.m.7 views

AZL-95559 CVE-2026-73077 affecting package vim 9.2.0782-1

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS6AI score0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/11 4:17 p.m.5 views

UBUNTU-CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.7AI score0.0014EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/11 4:17 p.m.15 views

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.6AI score0.0014EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/08/11 3:39 p.m.7 views

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.8AI score0.0014EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/11 3:39 p.m.10 views

EUVD-2026-56233

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.6AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70355

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

8.7CVSS5.7AI score0.00297EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70267

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0839 Description Filetype plugins runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim fail to safely separate shell arguments when passing Visual-mode selections from K through keywordprg...

8.5CVSS5.8AI score0.0014EPSS
SaveExploits0References50
NVD
NVD
added 2026/08/10 8:17 p.m.8 views

CVE-2026-72884

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, sanitizeCommand in packages/server/src/utils/builders/compose.ts only trims whitespace and strips surrounding quotes from compose.command before exportEnvCommand and docker command interpolation, allowing an...

8.7CVSS0.00426EPSS
SaveExploits0References4
Rows per page
Query Builder