Lucene search
+L

67557 matches found

EUVD
EUVD
added 2026/09/09 7:35 p.m.16 views

EUVD-2026-75127

An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the host of a self-managed PostgreSQL server by placing a crafted COPY ... ...

9.6CVSS6.1AI score0.00986EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:26 p.m.25 views

CVE-2026-0300

PAN-OS CVE-2026-0300 Non-Destructive Exposure Survey Tool Overview This tool is a non-destructive exposure survey utility for assessing whether a target PAN-OS service may expose network-accessible surfaces related to CVE-2026-0300. The tool is intended for authorized defensive security validatio...

9.8CVSS8.1AI score0.31725EPSS
SaveExploits7
NVD
NVD
added 2026/09/09 5:17 p.m.11 views

CVE-2026-77120

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating syste...

8.7CVSS0.00449EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 5:17 p.m.10 views

CVE-2026-23855

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote acces...

7.2CVSS0.00931EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 4:48 p.m.7 views

CVE-2025-14733

WatchGuard IKEv2 Scanner — CVE-2025-14733 Identify WatchGuard Firebox appliances vulnerable to CVE-2025-14733, a critical pre-authentication vulnerability in the Fireware OS IKEv2 implementation. This tool performs safe version detection through standard IKEv2 negotiation. It does not attempt...

9.8CVSS8.7AI score0.2651EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 4:44 p.m.8 views

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

7.2CVSS7.3AI score0.04312EPSS
SaveExploits5
CVE
CVE
added 2026/09/09 4:31 p.m.54 views

CVE-2026-77120

CVE-2026-77120 is an OS Command Injection vulnerability (CWE-78) in a Schneider Electric product. When an authenticated user with SSH enabled interacts with the operating system console that improperly processes user-controlled input, it can lead to privilege escalation to root and unauthorized e...

8.7CVSS5.9AI score0.00449EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 4:31 p.m.28 views

CVE-2026-77120

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating syste...

8.7CVSS0.00449EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 4:31 p.m.7 views

EUVD-2026-75107

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating syste...

8.7CVSS5.9AI score0.00449EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 4:17 p.m.7 views

CVE-2026-79947

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit...

5.5CVSS0.00764EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 4:17 p.m.8 views

CVE-2026-79945

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit...

5.5CVSS0.01714EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 4:17 p.m.7 views

CVE-2026-79689

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially explo...

9.8CVSS0.0191EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 4:17 p.m.7 views

CVE-2026-78484

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit...

7.8CVSS0.0182EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/09 4:17 p.m.7 views

CVE-2026-78493

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit...

7.8CVSS0.0182EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 4:02 p.m.9 views

EUVD-2026-75114

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote acces...

7.2CVSS5.9AI score0.00931EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/09 4:02 p.m.34 views

CVE-2026-23855

Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote acces...

7.2CVSS0.00931EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 4:02 p.m.46 views

CVE-2026-23855

Dell iDRAC9 and iDRAC10 contain an OS Command Injection vulnerability. Affected versions are iDRAC9 14G prior to 7.00.00.184 , 15G/16G prior to 7.30.10.50 , and iDRAC10 17G prior to 1.30.30.50 . A high-privileged attacker with remote access can exploit the flaw to inject OS commands, resulting in...

7.2CVSS5.9AI score0.00931EPSS
SaveExploits0References1
Palo Alto Networks
Palo Alto Networks
added 2026/09/09 4:00 p.m.8 views

Checkov by Prisma Cloud: OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov. Work around: No known workarounds exist for this issue...

4.7CVSS5.9AI score0.00824EPSS
SaveExploits0References1
Palo Alto Networks
Palo Alto Networks
added 2026/09/09 4:00 p.m.11 views

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...

7.1CVSS6.7AI score0.00447EPSS
SaveExploits0References1
Palo Alto Networks
Palo Alto Networks
added 2026/09/09 4:00 p.m.94 views

PAN-OS: Buffer Overflow Vulnerability via XML Processing

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...

9.2CVSS8.1AI score0.00337EPSS
SaveExploits0References1
Rows per page
Query Builder