53 matches found
CVE-2026-28199
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...
CVE-2026-28199 Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...
CVE-2026-28199
CVE-2026-28199 affects NetBackup Flex OS , where an authenticated user with access to the management shell can supply a specially crafted path argument to a diagnostic command, enabling relative path traversal to read arbitrary files from the underlying operating system. Successful exploitation m...
EUVD-2026-82877
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...
CVE-2026-28199: Improper Verification of Cryptographic Signature
An authenticated user with access to the NetBackup Flex OS management shell could read arbitrary files from the underlying operating system by supplying a specially crafted path argument to a diagnostic command. Successful exploitation could expose sensitive system configuration and credential...
PT-2026-95353
Name of the Vulnerable Software and Affected Versions NetBackup Flex OS affected versions not specified Description An authenticated user with access to the management shell can read arbitrary files from the underlying operating system. This is achieved by providing a specially crafted path...
CVE-2026-74870
opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...
CVE-2026-5511
In the web management interface of Archer AX72 SG v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. An authenticated attacker with administrative privileges could exploit this issue to confirm the...
CVE-2026-5511
In the web management interface of Archer AX72 SG v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. An authenticated attacker with administrative privileges could exploit this issue to confirm the...
EUVD-2026-30955
In the web management interface of Archer AX72 SG v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. An authenticated attacker with administrative privileges could exploit this issue to confirm the...
CVE-2026-5511: Generation of Error Message Containing Sensitive Information
In the web management interface of Archer AX72 SG v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. An authenticated attacker with administrative privileges could exploit this issue to confirm the...
CVE-2026-1735 Yealink MeetingBar A30 Diagnostic command injection
A weakness has been identified in Yealink MeetingBar A30 133.321.0.3. This issue affects some unknown processing of the component Diagnostic Handler. This manipulation causes command injection. It is feasible to perform the attack on the physical device. The exploit has been made available to the...
Arista Edge Threat Management - Arista Next Generation Firewall Versions 安全漏洞
Arista Edge Threat Management - Arista Next Generation Firewall Versions is a next-generation firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall Versions that stems from a diagnostic command injection flaw...
EUVD-2023-31725
Malicious code in bioql PyPI...
upload-server-for-novi-software-security
project: "TP-Link TL-WR841N Firmware Security Assessment" descr...
CVE-2020-6648
A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an authenticated attacker to obtain sensitive information such as users passwords by connecting to FortiGate CLI and executi...
CVE-2019-14094
Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT...
U.S. Dept Of Defense: Unauthenticated LFI (Local File Inclusion) using the symbol `!` At the target `https://████/`
The endpoint at https://████/jolokia/exec/com.sun.management:type=DiagnosticCommand/compilerDirectivesAdd/ was vulnerable to unauthenticated local file inclusion using the symbol '!'. This allowed reading local files on the server, such as /etc/passwd and /etc/crontab...
PT-2023-24141 · Qualcomm · 315 5G Iot Modem Firmware +220
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption when using the UIM diag command to retrieve the operator's name. No information is provided about the estimated...
CVE-2021-35072
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...