https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:43:48.512818+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-06149 bdu:2021-06149 2026-10-06T22:43:48.518593+00:00 bdu:2021-06149 https://cve.radiocsirt.org/vuln/cnvd-2021-101451 cnvd-2021-101451 2026-10-06T22:43:48.518626+00:00 cnvd-2021-101451 https://cve.radiocsirt.org/vuln/euvd-2026-29056 EUVD-2026-29056 2026-10-06T22:43:48.518641+00:00 EUVD-2026-29056 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34994 fkie_cve-2021-34994 2026-10-06T22:43:48.518653+00:00

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DataProvider class. The issue results from the lack of proper validation of a user-supplied string before executing it as JavaScript code. An attacker can leverage this vulnerability to escape the JavaScript sandbox and execute Java code in the context of NETWORK SERVICE. Was ZDI-CAN-13755.

 https://cve.radiocsirt.org/vuln/ghsa-xvcw-283x-r7pw GHSA-xvcw-283x-r7pw 2026-10-06T22:43:48.518683+00:00

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DataProvider class. The issue results from the lack of proper validation of a user-supplied string before executing it as JavaScript code. An attacker can leverage this vulnerability to escape the JavaScript sandbox and execute Java code in the context of NETWORK SERVICE. Was ZDI-CAN-13755.

 https://cve.radiocsirt.org/vuln/gsd-2021-34994 gsd-2021-34994 2026-10-06T22:43:48.518701+00:00 gsd-2021-34994