Lucene search
+L

9154 matches found

CNVD
CNVD
added 2021/12/01 12:00 a.m.11 views

elecom lan routers buffer overflow vulnerability

elecom lan routers is a router from Elecom Japan. A buffer overflow vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

6.8CVSS8AI score0.00454EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/12/01 12:00 a.m.12 views

The Perl fingerd program allows arbitrary command execution from remote users.

...

7.5CVSS7AI score0.03953EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.20 views

The vulnerability of the /etc/sudoers component of the EyesOfNetwork (EON) monitoring software for systems and networks allows a perpetrator to escalate their privileges and execute arbitrary commands.

The vulnerability of the /etc/sudoers component of the EyesOfNetwork EON monitoring software for systems and networks is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary commands using NSE scripts...

9.3CVSS7.5AI score0.60075EPSS
SaveExploits9References4Affected Software1
CNVD
CNVD
added 2021/12/01 12:00 a.m.17 views

elecom lan routers operating system command injection vulnerability

elecom lan routers is a router from Elecom Japan. An operating system command injection vulnerability exists in elecom lan routers, which can be exploited by an attacker to execute arbitrary operating system commands via an unspecified vector...

6.8CVSS8.1AI score0.00422EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:00 a.m.12 views

The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense (FTD) microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems lies in insufficient checking of command arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

7.8CVSS7.5AI score0.00271EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/11/23 12:00 a.m.9 views

TightVNC 安全漏洞

TightVNC is a cross-platform open source remote desktop software. A security vulnerability exists in tvnviewer.exe of TightVNC Viewer, which can be exploited by an attacker to execute arbitrary commands from a VNC server with the help of specially crafted FramebufferUpdate packets...

9.8CVSS8.7AI score0.02267EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/23 12:00 a.m.25 views

IBM Planning Analytics 注入漏洞

IBM Planning Analytics is a business planning and analysis solution from IBM Corporation. The solution supports automated execution of business planning, budgeting, and analysis processes.IBM Planning Analytics has a security vulnerability that stems from incorrect validation of csv file content...

9.3CVSS6.2AI score0.01751EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/11/22 12:00 a.m.48 views

Commvault CommCell Demo_ExecuteProcessOnGroup Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS8.9AI score0.82258EPSS
SaveExploits0
Talos
Talos
added 2021/11/22 12:00 a.m.74 views

CloudLinux Inc Imunify360 Ai-Bolit php unserialize vulnerability

Summary A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.8 and 5.9. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions...

8.3AI score
SaveExploits0
CNVD
CNVD
added 2021/11/21 12:00 a.m.53 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04977)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.1CVSS7.2AI score0.02915EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:00 a.m.60 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.9CVSS7.2AI score0.06061EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:00 a.m.70 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-01599)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 contains a security vulnerability that originates when the Web Manager wireless network scanner feature fails to properly filter special characters,...

9.9CVSS2.9AI score0.36234EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:00 a.m.78 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to OS command injection, which stems from a Web Manager Diagnostics:Ping feature that fails to properly filter special characters, commands,...

9.9CVSS3.5AI score0.06061EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:00 a.m.53 views

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-04980)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.9CVSS7.2AI score0.06061EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/11/18 12:00 a.m.12 views

The vulnerability of the CGI interface of the ZyWALL VPN2S microprogramming network interface devices allows a intruder to execute arbitrary commands.

The vulnerability of the Common Gateway Interface CGI interface of the ZyWALL VPN2S microprogramming network interface devices is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a hacker to execute...

7.3CVSS7.5AI score0.00305EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.11 views

Lantronix PremierWave 2050 操作系统命令注入漏洞

The PremierWave 2050 is an embedded Wi-Fi module manufactured by Lantronix.The Web Manager SslGenerateCSR feature of the Lantronix PremierWave 2050 8.9.0.0R4 is vulnerable to OS command injection, which can be exploited by attackers to cause arbitrary command execution with the help of specially...

9.1CVSS6AI score0.05271EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.9 views

Lantronix PremierWave 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.9CVSS6AI score0.06061EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.13 views

Lantronix PremierWave 2050 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded Wi-Fi module manufactured by Lantronix. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to cause arbitrary command execution in the "EC keypasswd" parameter wit...

9.1CVSS6.3AI score0.02915EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:00 a.m.43 views

Lantronix PremierWave 2050 Web Manager FsUnmount OS command injection vulnerability

Summary An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Test...

9.9CVSS9.1AI score0.06061EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/11/11 12:00 a.m.9 views

The vulnerability in the built-in RDoc documentation generator for the Ruby programming language allows a perpetrator to execute arbitrary commands.

The vulnerability of the RDoc documentation generator for the Ruby programming language is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

7CVSS6.9AI score0.0148EPSS
SaveExploits0References15Affected Software8
Rows per page
Query Builder