CVE-2026-73651 vulnerabilities

Vulnerabilities for packages: redisinsight...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

EUVD-2026-58799

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-73680

Cockpit CMS 2.14.0 and earlier exposes a command-injection vulnerability in the FFmpeg integration. An authenticated user with assets/upload can upload a video file whose filename contains shell metacharacters; the unsanitized filename is interpolated into a shell command executed via Process::fr...

GO-2023-1730 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GO-2024-3269 vulnerabilities

Vulnerabilities for packages: gh...

GO-2024-3296 vulnerabilities

Vulnerabilities for packages: gh...

GO-2025-3467 vulnerabilities

Vulnerabilities for packages: gh...

GO-2026-4408 vulnerabilities

Vulnerabilities for packages: wolfictl...

GO-2021-0227 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2024-2617 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0615 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2022-0956 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2025-3467 vulnerabilities

Vulnerabilities for packages: gh...

GO-2025-3845 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2026-5848 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-JGRX-MGXX-JF9V vulnerabilities

Vulnerabilities for packages: arangodb...

SUSE CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

EUVD-2026-58478

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...