CVE-2016-1141

KDDI HOME SPOT CUBE devices are affected by CVE-2016-1141, an OS command injection vulnerability in the application layer that allows remote authenticated users to execute arbitrary OS commands with the privileges of the affected component. Connected sources (JVNDB-2016-000012, JVN #54686544) des...

PT-2016-4599

Name of the Vulnerable Software and Affected Versions KDDI HOME SPOT CUBE devices version 2 and earlier Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions prior to 2, update to version 2 or later to resolve the issue...

CVE-2016-1141: Improper Neutralization of Special Elements used in an OS Command

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PayPal Java Serialization Vulnerability

A Java serialization vulnerability disclosed more than a year ago figured to have a long shelf life. It lived in popular Java application development frameworks such as Apache Commons Collections—where it’s been patched—and not to mention widely deployed application servers such as Oracle WebLogi...

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1142: Improper Neutralization of Special Elements used in an OS Command

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PT-2016-4600

Name of the Vulnerable Software and Affected Versions acmailer versions prior to 3.8.21 acmailer versions 3.9.x prior to 3.9.15 Beta Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For acmailer versions prior to 3.8.21, update to version...

CVE-2015-7426

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware aka Spectrum Protect Snapshot 4.1 before 4.1.3.0 allo...

Design/Logic Flaw

IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface LMI access...

PT-2016-3656

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.0.0 through 7.0.0 before FP19 IBM Security Access Manager for Web version 8.0 before 8.0.1.3 IF3 IBM Security Access Manager version 9.0 before 9.0.0.0 IF1 Description The issue allows remote...

PT-2016-1112

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware versions 7.1 through 7.1.3.0 Tivoli Storage FlashCopy Manager for VMware versions 4.1 through 4.1.3.0 Description The issue allows remote attackers to execute...

CVE-2015-6380

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622...

PT-2015-3204

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System version 1.11.160 Description The issue allows remote authenticated users to execute arbitrary OS commands via crafted parameters. This is due to the failure to neutralize special elements used in the...

PT-2015-3046

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System version 1.11.160 Description The issue exists due to the failure to neutralize special elements used in the operating system command. This allows a local attacker to execute arbitrary operating syste...

Design/Logic Flaw

PC-EGG pWebManager before 3.3.10, and before 2.2.2 for PHP 4.x, allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role...

PT-2015-7603

Name of the Vulnerable Software and Affected Versions PC-EGG pWebManager versions prior to 3.3.10 PC-EGG pWebManager version 2.2.2 for PHP 4.x Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role. Recommendations For PC-EGG...

CVE-2015-6554

The CVE-2015-6554 issue affects Symantec Endpoint Protection Manager (SEPM) 12.1 prior to 12.1-RU6-MP3, allowing remote execution of arbitrary OS commands via crafted data sent to SEPM. Affected vector is remote, with evidence across multiple sources describing an RCE through untrusted data handl...

PT-2015-7299

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1-RU6-MP2 Description The issue allows remote attackers to execute arbitrary OS commands via crafted data. Recommendations For Symantec Endpoint Protection Manager SEPM version...

CVE-2015-5672

TYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night + hollow ataraxia set allow remote attackers to execute arbitrary OS commands via crafted saved data...

PT-2015-7659

Name of the Vulnerable Software and Affected Versions Infinite Automation Mango Automation versions 2.5.x through 2.6.0 build 430 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions 2.5.x through 2.6.0 build 430, at the moment,...