Dell Unity OE Privilege Escalation Command Injection

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

Trellix Enterprise Security Manager Arbitrary Command Execution

The vulnerability of the application programming interface of the Trellix Enterprise Security Manager ESM system for monitoring, analyzing, and managing security threats is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploitin...

TP-Link TL-IPC42C Command Injection

The vulnerability of TP-Link TL-IPC42C IP camera’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted...

DrayTek Vigor 3900 Router Code Execution

The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the failure to address the elimination of certain special elements used in the operating system command. Exploiting this vulnerability allows a remote...

Virtuoso-opensource sch_name_to_object DoS

The vulnerability of the schnametoobject component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created...

PaperCut MF Printing DoS

The vulnerability of the web printing function in the control tools for printing in PaperCut MF and PaperCut NG is related to the failure to implement measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an attacker to cause servic...

Ivanti EPM Command Injection Code Execution

The vulnerability of the Ivanti EPM endpoint management software exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Zyxel NAS326/NAS542 Command Injection

The vulnerability of the microprogrammed network storage devices Zyxel NAS326 and Zyxel NAS542 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by...

Ivanti Cloud Services Appliance Command Injection Code Execution

The vulnerability of the Ivanti Cloud Services Appliance exists because measures to neutralize special elements used in the operating system are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Raisecom MSG1200 List Base Config XSS

The vulnerability of the listbaseconfig.php web interface of the Raisecom MSG1200, MSG2100E, MSG2200, and MSG2300 software is version 3.90. This vulnerability stems from the failure to eliminate special elements used in the OS command. Exploiting this vulnerability allows a remote attacker to...

EMACS ruby-find-library-file Code Execution

The vulnerability of the ruby-find-library-file function in the EMACS text editor is related to improper elimination of special elements. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Junos OS Evolved Privilege Escalation

The vulnerability of the command-line interface CLI of the Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to...

Junos OS Evolved Privilege Escalation

The vulnerability of the command-line interface CLI of Junos OS Evolved routers from the PTX Series, ACX Series, and QFX Series exists due to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to elevate...

Ruijie EG-2000SE Web Interface Privilege Escalation

The vulnerability of the newcli.php web interface of the Ruijie EG-2000SE software gateway lies in the lack of measures taken to neutralize the special elements used in commands. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges and gain...

D-Link DIR-2150 Router Code Execution

The vulnerability of the application software interface of D-Link DIR-2150 routers exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OnCell G3470A-LTE Web Server Command Execution

The vulnerability of the web server of the microprogramming software in the industrial cellular LTE modem OnCell G3470A-LTE is related to the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Pandora FMS Command Injection

The vulnerability of the Pandora FMS monitoring and management system lies in its inability to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands in Ajax PHP files through a specially created HTTP request...

PyTorch RPC Code Execution

The vulnerability of the RPC procedure call component in the PyTorch machine learning framework is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ivanti EPM Command Injection Code Execution

The vulnerability of the Ivanti EPM 2022 SU5 endpoint management software exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially...

Video Station Command Injection

The vulnerability of the Video Station photo album creation application relates to the failure to take measures to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...