Lucene search
+L

190 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.11 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises from insufficient validation of arguments passed in commands. This allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.02108EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.10 views

The vulnerability of the command-line interface of the Fortinet FortiManager device and the FortiAnalyzer network switch allows a perpetrator to execute arbitrary commands.

The vulnerability of the command-line interface of the Fortinet FortiManager device management system, as well as the FortiAnalyzer network switch, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

7.8CVSS7AI score0.01336EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.10 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises from insufficient validation of arguments passed in commands. This allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.02108EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.15 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, stems from insufficient validation of arguments passed in commands. This allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9CVSS7.9AI score0.02087EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:0 a.m.12 views

The vulnerability in the web interface of Supermicro X11 series BMC IPMI servers is related to insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary code.

The vulnerability of the web interface of the BMC IPMI server from Supermicro’s X11 series is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS6.2AI score0.17767EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.9 views

The vulnerability of the snmp.php component of the Cacti network monitoring software allows a attacker to execute any command.

The vulnerability of the snmp.php component of the Cacti network monitoring software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

9CVSS7.8AI score0.82186EPSS
SaveExploits6References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.7 views

The vulnerability of ASUS RT-AX55 router’s microprogramming software lies in insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of ASUS RT-AX55 router’s microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.4AI score0.33878EPSS
SaveExploits1References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.11 views

The vulnerability of the Identity Manager software component, used for managing and controlling access to corporate resources and IBM Security Verify Governance applications, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Identity Manager software component, which is used for managing and controlling access to corporate resources and applications in IBM Security Verify Governance, stems from insufficient validation of arguments passed to the command process. Exploiting this vulnerability...

8.3CVSS7.9AI score0.01302EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:0 a.m.13 views

Vulnerability of web servers of microprogramming software: Siemens SICAM CP-8031 and CP-8050 control modules, allowing attackers to execute arbitrary code.

The vulnerability of the web server of the microprogramming software for the processor module controllers Siemens SICAM CP-8031 and CP-8050 is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotel...

8.3CVSS7.1AI score0.47722EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
added 2023/05/11 12:0 a.m.13 views

The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the operating system...

9CVSS8.3AI score0.00746EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/11 12:0 a.m.11 views

The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system...

9CVSS8.3AI score0.04502EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/03/03 11:47 p.m.162 views

CVE-2023-26487

Vega’s CVE-2023-26487 is a cross-site scripting vulnerability in the lassoAppend function. The issue stems from the first argument not being strictly typed as an array, allowing objects with a push function (potentially via event.view) to be passed and used in the push call, enabling XSS vectors ...

6.5CVSS5.9AI score0.00806EPSS
SaveExploits1References3Affected Software2
OSV
OSV
added 2023/02/23 8:15 p.m.3 views

CVE-2023-20050

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

7.8CVSS7.3AI score0.00251EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/02/22 4:0 p.m.5 views

CVE-2023-20050

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An...

7.8CVSS6.1AI score0.00251EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:55 a.m.6 views

SUSE CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

7.5CVSS7.5AI score0.13649EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2023/02/14 12:0 a.m.14 views

The vulnerability in the built-in operating system Cradlepoint NetCloud (NCOS) arises from insufficient validation of arguments passed in commands, allowing a malicious actor to execute arbitrary code.

The vulnerability of the built-in operating system Cradlepoint NetCloud NCOS is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary code by rebooting the device and accessing the BIOS...

8.4CVSS7.6AI score0.00301EPSS
SaveExploits0References6Affected Software11
Positive Technologies
Positive Technologies
added 2023/02/06 12:0 a.m.7 views

PT-2025-40220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the network block device nbd module related to incomplete validation of arguments passed through ioctl calls. Specifically, the issue arises from...

8CVSS6.9AI score0.21521EPSS
SaveExploits4References727
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:0 a.m.12 views

The vulnerability of the command-line interface of the FortiExtender signal booster software arises from insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of the command-line interface of the FortiExtender signal booster software relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS8AI score0.01055EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/05 12:0 a.m.13 views

The vulnerability of the PDF creation library pdfkit, related to insufficient validation of arguments passed to the command, allows attackers to execute arbitrary commands.

The vulnerability of the pdfkit library for creating PDF files is related to insufficient checking of arguments passed to the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS8.1AI score0.39543EPSS
SaveExploits11References8Affected Software2
RedHat Linux
RedHat Linux
added 2022/11/08 9:32 a.m.12 views

kernel: udmabuf: validate ubuf->pagecount

A vulnerability was found in the Linux kernel in the udmabufcreate function. An improper user-provided argument validation can lead to a ZEROPTR value being passed to the sgallocappendtablefrompages function, which attempts a dereference and leads to a kernel crash...

5.5CVSS6.5AI score0.00242EPSS
SaveExploits0References5
Rows per page
Query Builder