CVE-2020-5601

Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors...

PT-2020-18574

Name of the Vulnerable Software and Affected Versions Chrome Extension for e-Tax Reception System version 1.0.0.0 Description The issue allows remote attackers to execute an arbitrary command. Recommendations For version 1.0.0.0, at the moment, there is no information about a newer version that...

CVE-2020-9413: Improper Neutralization of Input During Web Page Generation

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...

CVE-2019-16213

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system wi...

OS Command Injection

git-diff-apply is vulnerable to OS command injection. Lack of validation of untrusted input allows an attacker to inject arbitrary OS command via the affected parameter that is subsequently used in the diff function as a git command...

Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution

Overview Chrome Extension for e-Tax Reception System provided by National Tax Agency is an extension to use the e-Tax Reception System on Google Chrome and/or Chromium-based versions of Microsoft Edge. When a user runs a Chrome Extension for e-Tax Reception System, a specially crafted parameter b...

JVN#40039627: Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution

Chrome Extension for e-Tax Reception System provided by National Tax Agency is an extension to use the e-Tax Reception System on Google Chrome and/or Chromium-based versions of Microsoft Edge. When a user runs a Chrome Extension for e-Tax Reception System, a specially crafted parameter by an...

CVE-2020-14950

CVE-2020-14950 affects aaPanel (up to version 6.6.6 and earlier). The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request under the Software Store settings menu. Root cause: insufficient validatio...

aaPanel Remote Code Execution Vulnerability

aaPanel is a simple but powerful control panel for Linux servers. A remote code execution vulnerability exists in aaPanel 6.6.6 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary commands via the Script Content box on the Add Cron Job interface...

D-Link DIR-825 Router ntp_sync.cgi Command Execution

The vulnerability of the ntpsync.cgi component of the D-Link DIR-825 router’s microprogramming system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

CVE-2020-3269: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

CVE-2020-3268: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

CVE-2020-14421: Improper Neutralization of Argument Delimiters in a Command

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen...

PT-2020-2952

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions affected versions not specified Cisco RV130 versions affected versions not specified Cisco RV130W versions affected versions not specified Cisco RV215W versions affected versions not specified Description The issue is...

PT-2020-2957

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to multiple...

PT-2020-2955

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to multiple...

PT-2020-2951

Name of the Vulnerable Software and Affected Versions Cisco RV110W, RV130, RV130W, and RV215W Series Routers affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the affected routers, which could allow an...

PT-2020-2953

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 versions affected versions not specified Cisco Small Business RV325 versions affected versions not specified Cisco Small Business RV016 versions affected versions not specified Cisco Small Business RV042 versions...

PT-2020-5363

Name of the Vulnerable Software and Affected Versions NETGEAR RBK752 versions prior to 3.2.15.25 NETGEAR RBK753 versions prior to 3.2.15.25 NETGEAR RBK753S versions prior to 3.2.15.25 NETGEAR RBR750 versions prior to 3.2.15.25 NETGEAR RBS750 versions prior to 3.2.15.25 NETGEAR RBK842 versions pri...

Artica Pandora FMS Injection Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An injection vulnerability exists in the Events feature in Artica Pandora FMS version 7.44. An attacker can exploit this...