CVE-2020-13826

A CSV injection aka Excel Macro Injection or Formula Injection issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export...

Cisco Connected Mobile Experiences Privilege Escalation Vulnerability

A vulnerability in Cisco Connected Mobile Experiences CMX could allow an authenticated, local attacker with administrative credentials to execute arbitrary commands with root privileges. The vulnerability is due to improper user permissions that are configured by default on an affected system. An...

CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

CVE-2020-15862

CVE-2020-15862 affects Net-SNMP with an improper privilege management flaw: SNMP WRITE access to the EXTEND MIB allows an authenticated local attacker to execute arbitrary commands as root. Practical impact is local privilege escalation; exploitation requires access to an authenticated SNMP sessi...

CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

Updated firejail packages fix security vulnerability

It was reported that firejail does not respect the end-of-options separator "--", allowing an attacker with control over the command line options of the sandboxed application, to write data to a specified file CVE-2020-17367. It was reported that firejail when redirecting output via --output or...

MGASA-2020-0328 Updated firejail packages fix security vulnerability

It was reported that firejail does not respect the end-of-options separator "--", allowing an attacker with control over the command line options of the sandboxed application, to write data to a specified file CVE-2020-17367. It was reported that firejail when redirecting output via --output or...

WordPress Newsletter Plugin Command Injection

A command injection vulnerability exists in WordPress Newsletter Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

ShopXO Command Injection Vulnerability

ShopXO is an open source enterprise-level open source e-commerce system. A command injection vulnerability exists in ShopXO v1.8.1. The vulnerability stems from the user input structure to execute the command process, the network system or product fails to correctly filter the special characters,...

CVE-2020-24220

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

CVE-2020-24220

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

Command injection

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

CVE-2020-24220

ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server...

Command Execution Vulnerability in CyberControl of Beijing Sifang Relay Automation Co.

CyberControl is a flexible and customizable automation software platform that runs on multiple operating systems for applications ranging from monitoring masters in large industrial systems to tablet-based local monitoring systems. A command execution vulnerability exists in CyberControl of Beiji...

Roundcube Webmail Command Injection (CVE-2020-12641)

A command injection vulnerability exists in Roundcube Webmail . Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-10055

A vulnerability has been identified in Desigo CC V4.x, Desigo CC V3.x, Desigo CC Compact V4.x, Desigo CC Compact V3.x. Affected applications are delivered with a 3rd party component BIRT that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The...

Remote code execution

A vulnerability has been identified in Desigo CC V4.x, Desigo CC V3.x, Desigo CC Compact V4.x, Desigo CC Compact V3.x. Affected applications are delivered with a 3rd party component BIRT that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The...

Travel Management System SQL Injection Vulnerability

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that arises from a database application that lacks validation of externally entered SQL statements. An attacker could exploit this vulnerability to execute illegal SQL...

CVE-2020-15925

CVE-2020-15925 describes a SQL injection in Loway QueueMetrics prior to version 19.10.21, exploitable via the TPF_XPAR1 parameter in a tpf URI. The vulnerability is triggered by remote authenticated attackers and can lead to arbitrary SQL execution, impacting data integrity and confidentiality. A...

Aruba ClearPass Policy Manager tipsSimulationUpload command execution

Added: 08/13/2020 CVE: CVE-2020-7115 Background Aruba ClearPass is a network access control solution. Problem A vulnerability in the tipsSimulationUpload.action resource allows remote attackers to execute arbitrary commands by uploading a shared object library in the uploadClientCertFile paramete...