12017 matches found
CVE-2026-50523
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
EUVD-2026-58808
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
CVE-2026-17186
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...
CVE-2026-17186 IBM Db2 Mirror for i is affected by multiple vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...
EUVD-2026-58766
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...
CVE-2026-17186
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command...
CVE-2026-17186
IBM Db2 Mirror for i versions 7.4, 7.5 and 7.6 are affected by CVE-2026-17186, a high-severity vulnerability (OS command injection) that could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command. The issue impacts the GUI-facing...
PT-2026-72120
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to execute code locally. Recommendations At the moment,...
PT-2026-72105
Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Remote authenticated attackers can bypass security restrictions due to improper neutralization of special elements used in an SQL command, which may lead to SQL injection. SQL injection...
PT-2026-72103
Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description Improper neutralization of special elements in a command allows a remote attacker to execute arbitrary CL Control Language commands. CL is a command-line interface used to manage system...
CVE-2026-17481
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
EUVD-2026-58458
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-17481 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-17481
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-17481
IBM Documentation Offline (1.0.0–1.4.1), an Electron/Node.js desktop app, has CWE-117: improper log output neutralization allowing remote code execution (CVSS 8.8). The embedded server binds to all network interfaces. IBM recommends upgrading to 1.5.1; no workaround is available. No in-the-wild e...
PT-2026-71851
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-17481: Improper Output Neutralization for Logs
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-73648: Improper Neutralization of Input During Web Page Generation
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...
CVE-2026-56858: Improper Neutralization of Input During Web Page Generation
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...