https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 10:41:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-265845 EUVD-2026-265845 https://cve.radiocsirt.org/vuln/euvd-2026-265845 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62193 <p>Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of &#39;gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java&#39; from 2025-09-24.</p> <p>Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of &#39;gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java&#39; from 2025-09-24.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62193 https://cve.radiocsirt.org/vuln/ghsa-4rx6-3q6g-vr7j <p>Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, unauthenticated attackers can execute arbitrary OS commands.</p> <p>Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, unauthenticated attackers can execute arbitrary OS commands.</p> https://cve.radiocsirt.org/vuln/ghsa-4rx6-3q6g-vr7j https://cve.radiocsirt.org/vuln/va-26-015-01 <p>Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of &#39;gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java&#39; from 2025-09-24.</p> <p>Sites running NOAA PMEL Live Access Server (LAS) are vulnerable to remote code execution via specially crafted requests that include PyFerret expressions. By leveraging a SPAWN command, a remote, unauthenticated attacker can execute arbitrary OS commands. Fixed in a version of &#39;gov.noaa.pmel.tmap.las.filter.RequestInputFilter.java&#39; from 2025-09-24.</p> https://cve.radiocsirt.org/vuln/va-26-015-01