Lucene search
+L

4570 matches found

CVE
CVE
added 2026/08/12 8:41 p.m.59 views

CVE-2026-73425

CVE-2026-73425 affects Astro with the Netlify adapter prior to 8.1.2. The root cause is in remotePatternToRegex: dots in hostnames are escaped, but pathname metacharacters (., +, ?, (, [) are not escaped, so a restrictive pathname like /img/v1.0/file can match unintended paths. Netlify enforces t...

3.7CVSS5.1AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/12 7:32 p.m.42 views

CVE-2026-17417

CVE-2026-17417 affects IBM i versions 7.3–7.6. It enables a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in Resource Monitoring and Control. CVSS 3.1 base score 8.8 (NETWORK/LOW, PRIVILEGES REQUIRED: LOW, USER INTERACTION: NONE...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/12 7:32 p.m.12 views

CVE-2026-17417

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/08/12 7:32 p.m.8 views

EUVD-2026-57517

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/12 7:32 p.m.13 views

CVE-2026-17417 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/12 7:32 p.m.30 views

CVE-2026-17417 IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters...

8.8CVSS0.00418EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.5 views

PT-2026-71271

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of shell metacharacters. This occurs when the system fails to properly filter or escape special characters...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/11 10:17 p.m.5 views

UBUNTU-CVE-2026-5917

libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacters such as...

8.8CVSS6AI score0.00882EPSS
SaveExploits0References4
Wolfi
Wolfi
added 2026/08/11 8:23 p.m.12 views

GHSA-F23P-VX2J-J53R vulnerabilities

Vulnerabilities for packages: langfuse...

5.2AI score
SaveExploits0
OSV
OSV
added 2026/08/11 4:17 p.m.7 views

AZL-95559 CVE-2026-73077 affecting package vim 9.2.0782-1

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS6AI score0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/11 4:17 p.m.5 views

UBUNTU-CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.7AI score0.0014EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/11 4:17 p.m.15 views

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.6AI score0.0014EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/08/11 3:39 p.m.7 views

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.8AI score0.0014EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/11 3:39 p.m.10 views

EUVD-2026-56233

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

8.4CVSS5.6AI score0.0014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70355

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

8.7CVSS5.7AI score0.00297EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70267

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.2.0839 Description Filetype plugins runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim fail to safely separate shell arguments when passing Visual-mode selections from K through keywordprg...

8.5CVSS5.8AI score0.0014EPSS
SaveExploits0References50
NVD
NVD
added 2026/08/10 8:17 p.m.8 views

CVE-2026-72884

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, sanitizeCommand in packages/server/src/utils/builders/compose.ts only trims whitespace and strips surrounding quotes from compose.command before exportEnvCommand and docker command interpolation, allowing an...

8.7CVSS0.00426EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/10 8:17 p.m.9 views

CVE-2026-72875

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, settings.readTraefikFile in apps/dokploy/server/api/routers/settings.ts passes a path accepted by apiReadTraefikConfig to readConfigInPath in packages/server/src/utils/traefik/application.ts, where configPath is...

8.8CVSS0.00539EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/10 7:30 p.m.9 views

CVE-2026-72884

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, sanitizeCommand in packages/server/src/utils/builders/compose.ts only trims whitespace and strips surrounding quotes from compose.command before exportEnvCommand and docker command interpolation, allowing an...

8.7CVSS5.7AI score0.00426EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/08/10 7:30 p.m.39 views

CVE-2026-72884

Dokploy prior to v0.29.13 is affected by a command-injection risk in sanitizeCommand (packages/server/src/utils/builders/compose.ts): it only trims whitespace and strips surrounding quotes from compose.command before exportEnvCommand and docker command interpolation, enabling an authenticated use...

8.7CVSS5.7AI score0.00426EPSS
SaveExploits0References4
Rows per page
Query Builder