837 matches found
CVE-2020-8126
A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user Privilege-1 to escalate privileges and became administrator Privilege-15...
CVE-2020-8126
The CVE-2020-8126 case affects Ubiquiti EdgeSwitch before version 1.7.1, where a CGI script does not fully sanitize user input, enabling local command execution. An operator-privilege user (Privilege-1) can escalate to administrator (Privilege-15). The issue is triggered via crafted input in the ...
CVE-2020-8126: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user Privilege-1 to escalate privileges and became administrator Privilege-15...
PT-2020-19963
Name of the Vulnerable Software and Affected Versions EdgeSwitch versions prior to 1.7.1 Description A privilege escalation issue exists due to insufficient sanitization of user input by a CGI script, allowing local command execution. This enables an operator user to escalate privileges from...
Huawei EulerOS: Security Advisory for pcre (EulerOS-SA-2019-2486)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Advisory 2020-01-13-1 - uhttpd invalid data access via HTTP POST request (CVE-2019-19945)
DESCRIPTION An invalid data access can be triggered with an HTTP POST request to a CGI script specifying both Transfer-Encoding: chunked and a large Content-Length which exceeds 2^31 and is interpreted as a signed negative number. The negative content length is assigned to r→contentlength in...
CVE-2019-7485
Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...
CVE-2019-7484
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...
CVE-2019-7485
CVE-2019-7485 affects the SonicWall SMA100 appliance (firmware versions up to 9.0.0.3). The root cause is a buffer overflow in the DEARegister CGI script , exploitable by an authenticated user to execute arbitrary code on the device . Affected product: SMA100; impact includes potential control ov...
CVE-2019-7486
Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier...
CVE-2019-7484: Improper Neutralization of Special Elements used in an SQL Command
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...
CVE-2019-7486: Improper Control of Generation of Code
Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier...
PT-2019-18626
Name of the Vulnerable Software and Affected Versions SonicWall SMA100 versions 9.0.0.3 and earlier Description A buffer overflow issue in the SonicWall SMA100 allows an authenticated user to execute arbitrary code in the DEARegister CGI script. Recommendations For SonicWall SMA100 versions 9.0.0...
CVE-2019-7485: Buffer Copy without Checking Size of Input
Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier...
VulnCheck KEV: CVE-2019-16072
An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action...
EulerOS 2.0 SP2 : pcre (EulerOS-SA-2019-2486)
According to the version of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a...
CVE-2016-1000110
Removed by vendor...
CVE-2013-1889
modruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot...
