90769 matches found
CVE-2022-45899: Improper Neutralization of Special Elements used in an OS Command
Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...
PT-2026-38659
Name of the Vulnerable Software and Affected Versions Nokia Broadcast Message Center BMC versions prior to 13.1 Description An unauthenticated remote attacker can perform OS command injection with root privileges. This is possible by using shell metacharacters within the Log Scanner Search Patter...
CVE-2022-45899
Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...
CVE-2022-45899
Nokia Broadcast Message Center BMC before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field...
CVE-2026-29202: Improper Control of Generation of Code
Insufficient input validation of the plugin parameter of the createuser plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user...
CVE-2026-41682: Signed to Unsigned Conversion Error
pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi cast in parseuri. This issue has been patched in version 1.18.5...
PT-2026-39143
Name of the Vulnerable Software and Affected Versions kosma minmea version 0.3.0 Description A stack buffer overflow exists in the minmea scan function. The format specifier within this function copies NMEA field data into a buffer provided by the caller without utilizing a size parameter. This c...
Scanner 代码注入漏洞
Scanner is an AI model security assessment tool developed by 0DIN.ai. Versions 1.0.0 to 1.4.1 of Scanner contained a code injection vulnerability. This vulnerability originated from JavaScript injection in BrowserAutomation::PlaywrightService, which could lead to remote code execution...
CVE-2026-44928: Always-Incorrect Control Flow Implementation
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal...
CVE-2026-44927: Numeric Truncation Error
In uriparser before 1.0.2, there is pointer difference truncation to int in various places...
CVE-2026-41512: Improper Control of Generation of Code
ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to before version 1.4.1, there is a remote code execution vulnerability via JavaScript injection in BrowserAutomation::PlaywrightService. This issue has been patched in version 1.4.1...
CVE-2026-29201: Relative Path Traversal
Insufficient input validation of the feature file name in feature::LOADFEATUREFILE adminbin call can cause arbitrary file read when a relative file path is passed...
CVE-2023-42346: Improper Restriction of XML External Entity Reference
Alkacon OpenCms before 16 allows XXE when the refers to an external host...
CVE-2026-44335: Server-Side Request Forgery (SSRF)
PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32...
Linux Distros Unpatched Vulnerability : CVE-2026-43339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: prevent possible UaF in addrconfpermanentaddr The mentioned helper try to warn the user about an exceptional condition, but the message is delivered too...
Linux Distros Unpatched Vulnerability : CVE-2026-43387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: properly validate the data in rtwgetieex Just like in commit 154828bf9559 staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser, we...
Linux Distros Unpatched Vulnerability : CVE-2026-39823
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces...
CVE-2022-45899
Nokia Broadcast Message Center (BMC) versions prior to 13.1 are vulnerable to an OS command injection vulnerability (CVE-2022-45899). An unauthenticated remote attacker can execute arbitrary commands with root privileges by providing shell metacharacters in the Log Scanner Search Pattern field of...
Wordfence Intelligence Weekly WordPress Vulnerability Report (April 27, 2026 to May 3, 2026)
Last week, there were 87 vulnerabilities disclosed in 198 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 61 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities ...
