CVE-2020-7199

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged...

CVE-2020-7199: Improper Authentication

A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged...

HPE Edgeline Infrastructure Management Authorization Issues Vulnerability

HPE Edgeline Infrastructure Management is a software from Hewlett-Packard HPE for data center environments to manage Edge devices. A security vulnerability exists in HPE Edgeline Infrastructure Manager. An attacker could exploit the vulnerability to bypass remote authentication to execute arbitra...

CVE-2020-4627: Improper Neutralization of Formula Elements in a CSV File

IBM Cloud Pak for Security 1.3.0.1CP4S potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367...

PT-2020-5927

Name of the Vulnerable Software and Affected Versions: QNAP QTS affected versions not specified Description: The issue is related to the implementation of the myupnpmediasvr DLNA server process in QNAP QTS operating systems for network storage devices. It involves insufficient protection of servi...

CVE-2019-19872

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

PT-2020-10275

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation APROL versions prior to R4.2 V7.08 Description An issue was discovered that allows the injection and execution of arbitrary unintended commands via an unspecified attack scenario. Recommendations For versions prior to...

CVE-2019-19874: Improper Neutralization of Special Elements used in a Command

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364...

B&R Industrial Automation APROL Injection Vulnerability

B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. An injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to inject and execute arbitrary...

CVE-2019-19872: Improper Neutralization of Special Elements used in a Command

An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

PT-2020-9822

🚨 CVE-2019-19875 An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected using Python scripts via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364...

Huawei ManageOne Command Injection Vulnerability

Huawei ManageOne is a cloud data center management solution from China's Huawei. The product supports unified management of heterogeneous cloud resource pools, and provides functions such as multi-level VDC matching customer organization model, service catalog planning, self-service, centralized...

IBM Cloud Pak for Security Injection Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. An injection vulnerability exists in IBM Cloud Pak for Security, which is caus...

CVE-2020-4627

IBM Cloud Pak for Security 1.3.0.1CP4S potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 185367...

rConfig Network Command Injection

The vulnerability in the rConfig network device configuration management web application for the CentOS operating system relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

Arbtirary Command Execution

net-snmp is vulnerable to arbitrary command execution. An attacker is able to execute arbitrary commands as root due to SNMP write access to the EXTEND MIB...

Input validation

Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting using ntpServerlp1 parameter for the users. This affects D'live set-top box APWF2429TB v1.1.10...

CVE-2020-7842

CVE-2020-7842 describes an improper input validation vulnerability affecting the Netis Korea D’live AP (WF2429TB) v1.1.10. The issue arises in the time setting via the ntpServerlp1 parameter, which can lead to arbitrary command injection and execution. The known impact is arbitrary code execution...

CVE-2020-7842: Improper Input Validation

Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting using ntpServerlp1 parameter for the users. This affects D'live set-top box APWF2429TB v1.1.10...

CVE-2020-3586: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient validation of user-supplied input in the web-based management interface...