Lucene search
+L

7 matches found

Mend
Mend
•added 2026/09/18 8:41 p.m.•6 views

CVE-2026-61670

microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments accepted by crates/cli/lib/sandboxcmd.rs...

8.2CVSS6.3AI score0.00163EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•15 views

CVE-2026-90773: Improper Neutralization of Escape, Meta, or Control Sequences

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals...

3.2CVSS6.1AI score0.00147EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/03/18 6:16 a.m.•23 views

PYSEC-2026-2166

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with glances -w, exposing REST API with sensitive system information including process command-lines containing credentials passwords, API keys,...

8.7CVSS7.5AI score0.0155EPSS
SaveExploits1References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2026/03/18 6:16 a.m.•24 views

UBUNTU-CVE-2026-32596

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with glances -w, exposing REST API with sensitive system information including process command-lines containing credentials passwords, API keys,...

8.7CVSS7.5AI score0.0155EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/03/18 5:18 a.m.•12 views

CVE-2026-32596

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with glances -w, exposing REST API with sensitive system information including process command-lines containing credentials passwords, API keys,...

8.7CVSS7.6AI score0.0155EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2026/03/18 5:18 a.m.•12 views

CVE-2026-32596

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.2, Glances web server runs without authentication by default when started with "glances -w", exposing REST API with sensitive system information including process command-lines containing credentials passwords, API keys...

8.7CVSS7.5AI score0.0155EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/03/14 12:00 a.m.•39 views

PT-2026-25844

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.2 Description Glances, a system cross-platform monitoring tool, has an issue where the web server runs without authentication by default when started with glances -w. This exposes a REST API containing sensitive...

8.7CVSS7.5AI score0.0155EPSS
SaveExploits1References28
Rows per page
Query Builder