Lucene search
+L

123 matches found

BDU FSTEC
BDU FSTEC
•added 2023/10/14 12:00 a.m.•18 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises from insufficient validation of arguments passed in commands. This allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.18148EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/14 12:00 a.m.•33 views

The vulnerability of the FortiIsolator browser isolation platform lies in insufficient validation of arguments passed to commands, allowing attackers to execute arbitrary operating system commands.

The vulnerability of the FortiIsolator browser isolation platform lies in insufficient checking of arguments passed to commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the operating system...

7.8CVSS7.6AI score0.00456EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/14 12:00 a.m.•15 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises from insufficient validation of arguments passed in commands. This allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

10CVSS8.1AI score0.02108EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/14 12:00 a.m.•19 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, stems from insufficient validation of arguments passed in commands. This allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9CVSS7.9AI score0.02087EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/11 12:00 a.m.•20 views

The vulnerability in the web interface of Supermicro X11 series BMC IPMI servers is related to insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary code.

The vulnerability of the web interface of the BMC IPMI server from Supermicro’s X11 series is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS6.2AI score0.17767EPSS
SaveExploits1References5
OSV
OSV
•added 2023/08/25 10:15 p.m.•15 views

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

5.5CVSS5.8AI score0.00614EPSS
SaveExploits0References2
OSV
OSV
•added 2023/08/25 10:15 p.m.•14 views

CVE-2023-39288

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploi...

5.5CVSS5.8AI score0.00614EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/08/25 10:15 p.m.•10 views

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

5.5CVSS6AI score0.00614EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/25 12:00 a.m.•2 views

CVE-2023-39287: Improper Neutralization of Argument Delimiters in a Command

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

5.5CVSS6AI score0.00614EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/25 12:00 a.m.•3 views

CVE-2023-39288: Improper Neutralization of Argument Delimiters in a Command

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploi...

5.5CVSS6AI score0.00614EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/08/01 12:00 a.m.•16 views

The vulnerability of the Identity Manager software component, used for managing and controlling access to corporate resources and IBM Security Verify Governance applications, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Identity Manager software component, which is used for managing and controlling access to corporate resources and applications in IBM Security Verify Governance, stems from insufficient validation of arguments passed to the command process. Exploiting this vulnerability...

8.3CVSS7.9AI score0.01302EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/05/11 12:00 a.m.•16 views

The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system...

9CVSS8.3AI score0.04502EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/05/11 12:00 a.m.•18 views

The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the operating system...

9CVSS8.3AI score0.00746EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/05/11 12:00 a.m.•17 views

The vulnerability of the mySCADA myPRO industrial process visualization and control system, related to insufficient verification of arguments transmitted in commands, allows a perpetrator to execute arbitrary code in the operating system.

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability allows a malicious actor to execute any code in the operating system...

10CVSS8.1AI score0.4481EPSS
SaveExploits3References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/02/14 12:00 a.m.•20 views

The vulnerability in the built-in operating system Cradlepoint NetCloud (NCOS) arises from insufficient validation of arguments passed in commands, allowing a malicious actor to execute arbitrary code.

The vulnerability of the built-in operating system Cradlepoint NetCloud NCOS is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary code by rebooting the device and accessing the BIOS...

8.4CVSS7.6AI score0.00316EPSS
SaveExploits0References6Affected Software11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/30 12:00 a.m.•1 views

CVE-2022-4864: Improper Neutralization of Argument Delimiters in a Command

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

5.4CVSS5.8AI score0.00479EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/22 12:00 a.m.•2 views

CVE-2022-47926: Improper Neutralization of Argument Delimiters in a Command

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fstdel.inc.php...

9.8CVSS5.8AI score0.00799EPSS
SaveExploits1References3
CVE
CVE
•added 2022/01/06 12:35 p.m.•108 views

CVE-2021-45456

CVE-2021-45456 affects Apache Kylin 4.0.0. Multiple connected sources describe a mismatch between the legitimacy check for the project name and the shell command argument in DiagnosisService, enabling potential command injection. The issue is network-exploitable with a very high CVSS score (3.1: ...

9.8CVSS9.8AI score0.88887EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/27 12:00 a.m.•13 views

PT-2021-4684 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: The issue is related to insufficient validation of command arguments in the Command Line Interface CLI of Cisco Firepower Threat Defense FTD Software. Th...

7.8CVSS7.8AI score0.00271EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/13 12:00 a.m.•5 views

CVE-2021-36122: Improper Neutralization of Argument Delimiters in a Command

An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParseSup/UnzipFileUpd.cfm is susceptible to a command argument injection vulnerability when processing remote input in the zippass parameter from an authenticated user, leading to the ability to inject...

8.8CVSS6AI score0.01023EPSS
SaveExploits0References2
Rows per page
Query Builder