Path traversal

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

CVE-2023-37428 Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading t...

CVE-2023-37428

CVE-2023-37428 affects the EdgeConnect SD-WAN Orchestrator Web-Based Management Interface. The connected sources describe an authenticated remote-code-execution path-traversal vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands on the underlying host with...

CVE-2023-37427

CVE-2023-37427 affects the web-based management interface of EdgeConnect SD-WAN Orchestrator. The documented impact is an authenticated remote attacker able to execute arbitrary commands on the underlying host with root privileges, leading to complete system compromise. The provided materials do ...

CVE-2023-37427 Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands as root on...

CVE-2023-37424 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

CVE-2023-37424 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

CVE-2023-37424

CVE-2023-37424 affects the web-based management interface of Aruba EdgeConnect SD-WAN Orchestrator. The vulnerability allows an unauthenticated remote attacker to trigger arbitrary commands on the underlying host, potentially leading to complete system compromise. The issue arises from flaws in t...

Aruba Networks EdgeConnect SD-WAN Orchestrator 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a vulnerability in the web-based management interface, which allows arbitrary commands to be run o...

CVE-2020-21583

CVE-2020-21583 affects hwclock.13-v2.27. The issue allows attackers to gain escalated privileges or execute arbitrary commands via the path parameter when setting the date. The affected component is hwclock (part of util-linux). The provided documents do not include explicit exploitation status o...

CVE-2020-21583

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

CVE-2020-21583

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

PT-2023-11594 · Hwclock · Hwclock

Name of the Vulnerable Software and Affected Versions: hwclock version 2.27 Description: An issue was discovered that allows attackers to gain escalated privileges or execute arbitrary commands via the path parameter when setting the date. Recommendations: For version 2.27, consider restricting...

Aruba Networks EdgeConnect SD-WAN Orchestrator 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a flaw in the web-based management interface that could allow an authenticated, remote attacker to...

Linux hwclock 安全漏洞

Linux hwclock is a command from the Linux Foundation of America. It is used to display and set the hardware clock. A security vulnerability exists in Linux hwclock version 13-v2.27, which originated from a vulnerability that allows an attacker to gain escalated privileges or execute arbitrary...

CVE-2023-25915

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...

Input validation

Due to improper input validation, a remote attacker could execute arbitrary commands on the target system...

CVE-2023-25915 Authenticated Remote Command Execution in Danfoss AK-SM800A

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...

ASUSTOR Data Master Command Injection Vulnerability

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. ASUSTOR Data Master suffers from a command injection vulnerability that stems from the Printer service feature failing to properly filter constructed command special characters, commands, etc. The vulnerability...

CVE-2023-39416

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands...