PT-2021-21989

Name of the Vulnerable Software and Affected Versions: SAP Business One version 10.0 Description: The issue allows an attacker to inject formulas when exporting data to Excel due to improper sanitation during the data export, which can lead to the execution of arbitrary commands on the victim's...

CVE-2021-37727: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant IAP versions: 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3...

SAP Business One security vulnerabilities

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One version 10.0 is vulnerable to CSV injection, which can be exploited by attackers to execute arbitrary commands on a victim's computer...

PT-2021-21841

Name of the Vulnerable Software and Affected Versions: HPE Aruba Instant IAP versions 6.4.x.x: 6.4.4.8 through 4.2.4.18 and below HPE Aruba Instant IAP versions 6.5.x.x: 6.5.4.20 and below HPE Aruba Instant IAP versions 8.5.x.x: 8.5.0.12 and below HPE Aruba Instant IAP versions 8.6.x.x: 8.6.0.11...

PT-2021-21846

Name of the Vulnerable Software and Affected Versions: HPE Aruba Instant IAP versions 6.4.x.x: 6.4.4.8 through 4.2.4.17 and below HPE Aruba Instant IAP versions 6.5.x.x: 6.5.4.18 and below HPE Aruba Instant IAP versions 8.5.x.x: 8.5.0.11 and below HPE Aruba Instant IAP versions 8.6.x.x: 8.6.0.6 a...

PT-2021-21844

Name of the Vulnerable Software and Affected Versions: HPE Aruba Instant IAP versions 6.4.4.8 through 6.4.4.18 and below HPE Aruba Instant IAP versions 6.5.4.20 and below HPE Aruba Instant IAP versions 8.5.0.12 and below HPE Aruba Instant IAP versions 8.6.0.11 and below HPE Aruba Instant IAP...

CVE-2021-38180: Improper Neutralization of Formula Elements in a CSV File

SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel CSV injection due to improper sanitation during the data export. An attacker could thereby execute arbitrary commands on the victim's computer but only if the victim allows to execute macros while...

Emerson WirelessHART Gateway operating system command injection vulnerability

The Emerson WirelessHART Gateway is a wireless gateway from Emerson USA. The Emerson WirelessHART Gateway suffers from an operating system command injection vulnerability that originates from incorrect validation of input in a password phrase. An attacker could exploit this vulnerability to pass...

PT-2021-20467

Name of the Vulnerable Software and Affected Versions: QVR versions prior to 5.1.5 build 20210902 Description: A command injection issue has been reported, potentially allowing remote attackers to execute arbitrary commands on QNAP devices running QVR. Recommendations: For versions prior to 5.1.5...

PT-2021-7222

Name of the Vulnerable Software and Affected Versions MCE Systems affected versions not specified Description The vulnerability in the MCE Systems mobile device lifecycle management system's WebView component is related to the failure to neutralize special elements used in the operating system...

PT-2021-5370

Name of the Vulnerable Software and Affected Versions Imunify360 version 5.10.2 Description A php unserialize vulnerability exists in the Ai-Bolit functionality, allowing potential arbitrary command execution through a specially-crafted malformed file. An attacker can provide a malicious file to...

CVE-2021-24016

An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host...

CVE-2021-24016: Improper Neutralization of Formula Elements in a CSV File

An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host...

SureLine aircraft monitoring cgi/networkDiag.cgi Arbitrary Command Execution

The vulnerability of the cgi/networkDiag.cgi implementation of the SureLine monitoring application exists because measures are not taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary command execution vulnerability. An authenticated attacker could leverage this vulnerability to execute arbitrary commands. User interaction is required to abuse this vulnerability in that a user must open a maliciously...

CVE-2021-39826

Adobe Digital Editions 4.5.11.187646 (and earlier) are affected by an arbitrary command execution vulnerability (CVE-2021-39826). An authenticated attacker could execute commands by convincing a user to open a malicious .epub file; user interaction is required. The issue is cited across multiple ...

PT-2021-4408

Name of the Vulnerable Software and Affected Versions QNAP QVR versions prior to 5.1.5 build 20210803 Description A command injection issue affects QNAP devices running QVR, allowing remote attackers to execute arbitrary commands if exploited. Recommendations For QNAP QVR versions prior to 5.1.5...

PT-2021-5901

Name of the Vulnerable Software and Affected Versions NETGEAR RBK752 versions prior to 3.2.16.6 NETGEAR RBR750 versions prior to 3.2.16.6 NETGEAR RBS750 versions prior to 3.2.16.6 NETGEAR RBK852 versions prior to 3.2.16.6 NETGEAR RBR850 versions prior to 3.2.16.6 NETGEAR RBS850 versions prior to...

PT-2021-5890

Name of the Vulnerable Software and Affected Versions NETGEAR RBK752 versions prior to 3.2.16.6 NETGEAR RBR750 versions prior to 3.2.16.6 NETGEAR RBS750 versions prior to 3.2.16.6 NETGEAR RBK852 versions prior to 3.2.16.6 NETGEAR RBR850 versions prior to 3.2.16.6 NETGEAR RBS850 versions prior to...

PT-2021-5864

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.24 NETGEAR CBR750 versions prior to 4.6.3.6 NETGEAR RBK752 versions prior to 3.2.17.12 NETGEAR RBR750 versions prior to 3.2.17.12 NETGEAR RBS750 versions prior to 3.2.17.12 NETGEAR RBK852 versions prior to...