4021 matches found
CVE-2019-16864
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...
Remote code execution
CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...
PT-2022-2081
Name of the Vulnerable Software and Affected Versions TP-LINK TL-WR840NES version V6.20 180709 Description The issue is related to a command injection vulnerability. It is associated with the util execSystem function in the libcmm.so module of the TP-Link TL-WR840N ES router's firmware. The...
PT-2022-8164
Name of the Vulnerable Software and Affected Versions EnterpriseDT CompleteFTP versions prior to 12.1.4 Description The issue allows for Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM. Recommendations For versions prior to...
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271...
Mageia: Security Advisory (MGASA-2018-0484)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-46532
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via execexpr at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
PT-2022-12777
Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS via the exec expr function at src/mjs exec.c, which can cause a Denial of Service DoS. Recommendations For version 2.20.0, consider disabling the exec expr function a...
PT-2022-7663
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the incorrect update of reference counters in the gpmi nfc exec op function of the MTD driver in the Linux kernel. This can potentially allow an attacker to impac...
CVE-2021-44981
In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and parses it into a shellexec''; function without properly sanitizing any shell arguments, therefore remote code execution is possible. Additionally, as the media server is running as root by...
PT-2022-12279
Name of the Vulnerable Software and Affected Versions QuickBox Pro versions 2.5.8 and below Description The issue allows for remote code execution due to a variable in the config.php file that takes a GET parameter value and parses it into a shell exec function without properly sanitizing shell...
PT-2022-10773
Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer dereference in the syscall open exec function. This could allow the execution of a malicious file, potentially causing a system crash. Recommendations For...
R818 代码问题漏洞
Allwinner Technology R818 is a quad-core intelligent voice with screen chip from Allwinner Technology Zhuhai, China. A security vulnerability exists in the Allwinner R818 SoC Android Q SDK V1.0, which originates from a NULL pointer dereference in the open exec function that could execute a...
Improper Privilege Management in shelljs
Impact Output from the synchronous version of shell.exec may be visible to other users on the same system. You may be affected if you execute shell.exec in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec as the root user. Other shelljs functions including the asynchronous...
CVE-2021-46020
An untrusted pointer dereference in mrbvmexec of mruby v3.0.0 can lead to a segmentation fault or application crash...
Exploit for Out-of-bounds Write in Solarwinds Serv-U
Serv-U CVE-2021-35211 Exploit Potential for DoS - check yo...
PT-2022-12506
Name of the Vulnerable Software and Affected Versions mruby version 3.0.0 Description The issue is related to an untrusted pointer dereference in the mrb vm exec function, which can cause a segmentation fault or application crash. Recommendations For mruby version 3.0.0, at the moment, there is n...
Information Disclosure
shelljs is vulnerable to information disclosure. The vulnerability exists in ShellJS exec function of exec.js because the file permissions have not been locked down which allows an attacker to gain access to sensitive information of file system of the running scripts and crash application...