108 matches found
EUVD-2026-84974
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16469
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16469 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16469
The IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime is vulnerable to an issue where a remote authenticated attacker could execute arbitrary commands. This is caused by the improper neutralization of special elements used in an OS command . The CVSS 3.1 score is 8.8 (High) with a network at...
CVE-2026-16469 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
PT-2026-97067
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description The px-runtime component contains a flaw where special elements used in OS commands are not properly neutralized. This allows a remote authenticated attacker to execute arbitrary...
CVE-2026-16469: Improper Neutralization of Special Elements used in an OS Command
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-83260
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...
CVE-2026-83260
CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...
EUVD-2026-79612
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...
CVE-2026-83260: Improper Privilege Management
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...
PT-2026-92783
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A flaw exists in the Event Java PX component of the Oracle Agile PLM product within Oracle Supply Chain. A high privileged attacker with network access via T3 or IIOP Internet Inter-ORB Protocol, a...
MAL-2026-2545 Malicious code in @sap-px/pxapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a3dbae0518bc379bebf8a6eecf65c9b7ed68be4b1e352a458a42ba77b5b2d The package @sap-px/pxapi was found to contain malicious code. Source: ghsa-malware f83795730a6230997fb73e029559ad586c6130bc00c0cc6740e3d82f2250b452...
Malicious code in @sap-px/pxapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c70a3dbae0518bc379bebf8a6eecf65c9b7ed68be4b1e352a458a42ba77b5b2d The package @sap-px/pxapi was found to contain malicious code. Source: ghsa-malware f83795730a6230997fb73e029559ad586c6130bc00c0cc6740e3d82f2250b452...
PT-2026-24381
Name of the Vulnerable Software and Affected Versions PX4 Autopilot versions 1.12.x through 1.15.x Description The autopilot software contains a logic flaw in the mode switching mechanism. Specifically, when transitioning from Auto mode to Manual mode while the drone is in the "ARMED" state – aft...
Malicious Package
Overview chai-px is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in chai-px (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeac68ac3a89859c0a6c38e5d55e4e2e9b9ffa77476a10cdc1d31de070bea68 The package chai-px was found to contain malicious code. Source: ghsa-malware 708ec6326dbafd483773c64035513b5cd8be0a0842c3d44d92af9eee01408b8a Any...
MAL-2026-587 Malicious code in chai-px (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfeac68ac3a89859c0a6c38e5d55e4e2e9b9ffa77476a10cdc1d31de070bea68 The package chai-px was found to contain malicious code. Source: ghsa-malware 708ec6326dbafd483773c64035513b5cd8be0a0842c3d44d92af9eee01408b8a Any...
