617 matches found
CVE-2021-4207 affecting package qemu-kvm 4.2.0-46
CVE-2021-4207 affecting package qemu-kvm 4.2.0-46. A patched version of the package is available...
CVE-2022-0358 affecting package qemu-kvm 4.2.0-41
CVE-2022-0358 affecting package qemu-kvm 4.2.0-41. A patched version of the package is available...
FortiTester 操作系统命令注入漏洞
FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester 7.1.0, all versions of 7.0, versions 4.0.0 through 4.2.0, and versions 2.3.0 through 3.9.1, which stems from improper neutralization of multiple special...
PT-2023-2122 · Fortinet · Fortitester
Name of the Vulnerable Software and Affected Versions: FortiTester versions 2.3.0 through 3.9.1 FortiTester versions 4.0.0 through 4.2.0 FortiTester versions 7.0.0 through 7.1.0 Description: The issue exists due to the failure to neutralize special elements used in an OS command, allowing an...
Command injection
An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted...
CVE-2022-38373
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting XSS attack via sending requests with specially crafted lure resource ID...
FortiTester 操作系统命令注入漏洞
FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, and 7.0.0 through 7.1.0, which stems from improper neutralization of a special element used. An attack...
PT-2022-5760 · Fortinet · Fortitester
Name of the Vulnerable Software and Affected Versions: FortiTester versions 3.0.0 through 3.9.1 FortiTester versions 4.0.0 through 4.2.0 FortiTester versions 7.0.0 through 7.1.0 Description: The issue is related to an improper neutralization of special elements used in an OS command, which may...
PT-2022-18688 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 4.2.0 through 4.2.3 Description: An issue was discovered in Joomla! where inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components. Recommendations: For Joomla!...
FortiTester 操作系统命令注入漏洞
FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, and 7.0.0 through 7.1.0, which stems from improper neutralization of a special element used in the SSH...
FortiTester 操作系统命令注入漏洞
FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, and 7.0.0 through 7.1.0, which stems from improper invalidation of special elements used in OS command...
PT-2022-23244 · Freshservice · Freshservice Linux Agent +2
Name of the Vulnerable Software and Affected Versions: FreshService Windows Agent versions prior to 2.11.0 FreshService macOS Agent versions prior to 4.2.0 FreshService Linux Agent versions prior to 3.3.0 Description: The issue is related to broken integrity checking via the FreshAgent client and...
WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability
Authenticated Plugin Setting change vulnerability was discovered by Muhammad Daffa Patchstack Alliance in the WordPress WP Shamsi plugin versions = 4.1.1. Solution Update the WordPress WP Shamsi plugin to the latest available version at least 4.2.0...
Mapper SQL注入漏洞
Mapper is a Java persistence framework developed by Liuzh in China. Mapper is a Java persistence framework that maps objects to corresponding records in a database by associating them with stored procedures or SQL statements via XML descriptors or annotations. A SQL injection vulnerability exists...
CVE-2022-27911
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...
Joomla 4.2.0 < 4.2.1 Joomla 4.2.1 Security and Bug Fix Release (5866-joomla-4-2-1-release)
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.2.0 prior to 4.2.1. It is, therefore, affected by a vulnerability. - An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the...
Seiko Solutions SkyBridge MB-A100/A110 命令注入漏洞
The Seiko Solutions SkyBridge MB-A100/A110 is an LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in the Seiko Solutions SkyBridge MB-A100/A110 v4.2.0 and earlier, which stems from the ipAddress parameter being found to contain command injection...
PT-2022-23465 · Seiko · Seiko Skybridge Mb-A100/A110
Name of the Vulnerable Software and Affected Versions: Seiko SkyBridge MB-A100/A110 versions 4.2.0 and below Description: A command injection issue was discovered via the ipAddress parameter at the "/07system08execute ping 01" endpoint. This allows for potential command injection attacks...
CVE-2022-36414
There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...