2190 matches found
Cortex XDR Agent Command Injection
The vulnerability of the command-line interface of the network traffic analysis, network detection, and response tool Cortex XDR Agent for Windows operating systems is related to the storage of data in an open manner. Exploiting this vulnerability can allow attackers to gain unauthorized access t...
Cortex XDR Agent Command Execution
The vulnerability of the command-line interface of the network traffic analysis, network detection, and response tool Cortex XDR Agent for Windows operating systems is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary...
Cisco Identity Services Engine Privilege Escalation
The vulnerability of the Command Line Interface CLI of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize special elements used in the OS command line. Exploiting this vulnerability can allow attackers to increase their privileges...
Cisco Identity Services Engine Privilege Escalation
The vulnerability of the Command Line Interface CLI of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize special elements used in the OS command line. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2022-41023
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
conntrack-tools bug fix and enhancement update
An update is available for conntrack-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The conntrack-tools packages enable the user to set up a High...
Cisco IOS XE SD-WAN Command-Line Interface File Deletion
The vulnerability of the command-line interface CLI of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to delete any files from the file system...
PFE Control Demon DoS
The vulnerability of the PFE evo-pfemand control daemon for JunOS Evolved involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by executing arbitrary commands through the command line interface, or by sending...
FortiExtender Command Injection
The vulnerability of the command-line interface of the FortiExtender signal booster software relates to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
FortiWeb Command Line Path Traversal File Deletion
The vulnerability of the command-line interface of FortiWeb web applications is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability could allow a malicious actor to delete any files from the file system of the vulnerable device remotely...
PT-2023-1108 · Cisco · Cisco Roomos +1
Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS affected versions not specified Description: The issue is related to inadequate access control in the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE...
PT-2023-3271 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the system configuration, whe...
Microsoft Azure CLI Code Execution
The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Cisco SD-WAN CLI DoS
The vulnerability of the command-line interface CLI of Cisco SD-WAN microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Cisco SD-WAN Path Traversal
The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to an...
PYSEC-2022-43017
An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...
PT-2022-7169 · Ericsson · Ericsson Evolved Packet Gateway
Name of the Vulnerable Software and Affected Versions: Ericsson Evolved Packet Gateway EPG versions 2.x before 2.16 Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 Description: The issue is related to the command-line interface CLI of the Ericsson Evolved Packet Gateway EPG and is...
CVE-2022-37923
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...
CVE-2022-37920
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...