8907 matches found
AlmaLinux 8 : container-tools:rhel8 (ALSA-2022:7457)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7457 advisory. golang: net/http/httputil: panic due to racy read of persistConn after handler panic CVE-2021-36221 cri-o: memory exhaustion on the node when access to th...
CVE-2022-20934
A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper input validation for specific CLI commands...
CVE-2022-20934
CVE-2022-20934 affects Cisco Firepower Threat Defense (FTD) and Cisco FXOS Software. The issue is a command-injection vulnerability in the CLI caused by insufficient input validation, allowing an authenticated, local attacker with Administrator privileges to inject OS commands and gain root acces...
Cisco Firepower Threat Defense和Cisco FXOS Software 操作系统操作系统命令注入漏洞
Cisco Firepower Threat Defense FTD and Cisco FXOS Software are both products of Cisco, Inc. Cisco Firepower Threat Defense is a unified suite of software that provides next-generation firewall services.Cisco FXOS Cisco FXOS Software is a suite of firewall software that runs in Cisco security...
CentOS 8 : php:8.0 (CESA-2022:7624)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory. - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625...
osbuild-composer bug fix and enhancement update
An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The osbuild-composer package is a service for building customized OS...
GitHub: CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI
...
nvme-cli bug fix and enhancement update
An update is available for nvme-cli. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...
awscli bug fix and enhancement update
An update is available for awscli. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...
CVE-2022-33186 : EZServer module vulnerability
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP...
@kyedoesdev/lente-cli (>=0.1.0, <=0.1.1), @kyedoesdev/lente-core (0.1.0) potentially affected by CVE-2022-39386 via @fastify/websocket (5.0.0)
@fastify/websocket NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @kyedoesdev/lente-cli =0.1.0, =0.1.1 - @kyedoesdev/lente-core 0.1.0 Source cves: CVE-2022-39386 Source advisory:...
CVE-2022-37911
Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of...
CVE-2022-37910
CVE-2022-37910 describes a buffer overflow in the ArubaOS command line interface that can cause a denial of service on affected systems. The vulnerability is documented across multiple feeds (NVD, Red Hat CVE page, NCSC advisories) with ArubaOS CLI identified as the vulnerable component and the r...
CVE-2022-37906
CVE-2022-37906 is an authenticated path-traversal vulnerability in the ArubaOS command line interface. The issue allows an attacker with user-level access to delete arbitrary files on the underlying operating system by abusing CLI paths. Multiple sources confirm ArubaOS CLI exposure and the impac...
CVE-2022-37900
CVE-2022-37900 describes authenticated command-injection vulnerabilities in the ArubaOS command-line interface. Exploitation could allow arbitrary commands to be executed with privileged OS rights. Affected software is ArubaOS (Aruba Mobility Controllers/Mobility Access Switches) with the vulnera...
CVE-2022-37899
CVE-2022-37899 describes authenticated command injection in ArubaOS CLI, allowing execution of arbitrary commands with privileged OS access. Multiple feeds (NVD, Red Hat, CNNVD, PRION, etc.) corroborate ArubaOS as the affected software and a command-injection class vulnerability; some sources not...
PT-2022-24146 · Hewlett Packard · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is due to improper restrictions on XML entities, which leads to multiple vulnerabilities in the command line interface. A successful exploit could allow an authenticated attacker ...
CVE-2022-38372
A hidden functionality vulnerability CWE-1242 in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command...
CVE-2022-26119
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password...