The vulnerability of the command-line interface of FortiWeb web applications relates to incorrect path name restrictions for access-controlled directories. This allows attackers to delete any files from the file system on the vulnerable device.

The vulnerability of the command-line interface of FortiWeb web applications is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability could allow a malicious actor to delete any files from the file system of the vulnerable device remotely...

pcs bug fix and enhancement update

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The pcs packages provide a command-line configuration system for the Pacemaker an...

PT-2023-1108 · Cisco · Cisco Roomos +1

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS affected versions not specified Description: The issue is related to inadequate access control in the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE...

PT-2023-3271 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the system configuration, whe...

[SECURITY] Fedora 37 Update: curl-7.85.0-5.fc37

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage arises from incorrect path name restrictions related to restricted access directories. This vulnerability allows attackers to create or re-record critical files.

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to an...

The vulnerability of the Command Line Interface (CLI) of the Microsoft Azure platform, which allows a hacker to execute arbitrary code.

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the command-line interface (CLI) of Cisco SD-WAN microprogramming software, related to insufficient input validation, allows a malicious actor to trigger service failures.

The vulnerability of the command-line interface CLI of Cisco SD-WAN microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

PYSEC-2022-43017

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

UBUNTU-CVE-2022-40898

An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python Packaging Authority PyPA Wheel version 0.37.1 and earlier. An attacker c...

npm abacus-ext-cmdline 操作系统命令注入漏洞

npm abacus-ext-cmdline is a command line execution utility from npm USA. An operating system command injection vulnerability exists in abacus-ext-cmdline, which stems from incorrect user input cleanup and is prone to command injection via the execute function...

DEBIAN-CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

CVE-2022-4515

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags in sort.c calls the system3...

PT-2022-7169 · Ericsson · Ericsson Evolved Packet Gateway

Name of the Vulnerable Software and Affected Versions: Ericsson Evolved Packet Gateway EPG versions 2.x before 2.16 Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 Description: The issue is related to the command-line interface CLI of the Ericsson Evolved Packet Gateway EPG and is...

GHSA-VR8J-HGMM-JH9R Denial of service by double-checked locking in openssl-src

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

Denial of service by double-checked locking in openssl-src

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

CVE-2022-3996

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

CVE-2022-3996 X.509 Policy Constraints Double Locking

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...

CVE-2022-3996

If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems most widely: Windows this results in a denial of service when the affected process hangs. Policy processing being enabled o...