Lucene search
+L

13811 matches found

NVD
NVD
added 2023/03/21 12:15 p.m.20 views

CVE-2023-1153

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Pacsrapor: before 1.22...

9.8CVSS10AI score0.00706EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/21 12:15 p.m.10 views

CVE-2023-1153

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22...

9.8CVSS7.4AI score0.00706EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/21 12:15 p.m.19 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22...

7.5CVSS9.8AI score0.00706EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/21 11:19 a.m.25 views

CVE-2023-1153 SQLi in Pacsrapor

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Pacsrapor: before 1.22...

9.8CVSS10AI score0.00706EPSS
SaveExploits0References2
Citrix
Citrix
added 2023/03/21 12:00 a.m.34 views

How to disable/enable a service (LB, GSLB, etc.) using the NetScaler's CLI

How to disable/enable a service LB, GSLB, etc. using CLI...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/03/21 12:00 a.m.12 views

PT-2023-21573 · Etcd +1 · Etcd +1

Name of the Vulnerable Software and Affected Versions: cilium-cli versions prior to 0.13.2 Description: The issue arises when cilium-cli is used to configure cluster mesh functionality, potentially removing the enforcement of user permissions on the etcd store. This occurs due to an incorrect mou...

4.8CVSS7.1AI score0.00192EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/03/21 12:00 a.m.14 views

PT-2023-16785 · Pacsrapor · Pacsrapor

Name of the Vulnerable Software and Affected Versions: Pacsrapor versions prior to 1.22 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection and Command Line Execution through S...

9.8CVSS9.8AI score0.00706EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:00 a.m.13 views

The vulnerability of FortiWeb web application command-line interpreter and FortiRecorder video surveillance system devices allows attackers to gain unauthorized access to protected information.

The vulnerability of the command-line interpreter of FortiWeb web applications and FortiRecorder video surveillance devices relates to improper filtering of one or more special elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using...

5.5CVSS5.9AI score0.00225EPSS
SaveExploits0References2Affected Software2
Citrix
Citrix
added 2023/03/20 12:00 a.m.15 views

How to specify command line parameters when distributing a WEM application

To deploy applications via Workspace Environment management with additional command line parameters...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/03/20 12:00 a.m.19 views

CBL Mariner 2.0 Security Update: gnupg2 (CVE-2022-34903)

The version of gnupg2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-34903 advisory. - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a...

6.5CVSS7.3AI score0.02763EPSS
SaveExploits1References2
OSV
OSV
added 2023/03/15 10:15 p.m.8 views

UBUNTU-CVE-2023-27600

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...

7.5CVSS7AI score0.0099EPSS
SaveExploits0References6
OSV
OSV
added 2023/03/15 10:15 p.m.73 views

UBUNTU-CVE-2023-27601

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...

7.5CVSS5.7AI score0.0099EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/03/15 12:00 a.m.11 views

PT-2023-21242 · Opensips · Opensis

Name of the Vulnerable Software and Affected Versions: OpenSIPS versions prior to 3.1.7 and 3.2.4 Description: OpenSIPS is a Session Initiation Protocol SIP server implementation. The issue arises when a malformed SDP body is received and processed by the delete sdp line function in the sipmsgops...

7.5CVSS7.3AI score0.0099EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:00 a.m.11 views

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.5AI score0.01481EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:00 a.m.14 views

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.5AI score0.01481EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:00 a.m.10 views

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.5AI score0.01481EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:00 a.m.13 views

The vulnerability of the FortiOS operating systems arises from incorrect restrictions on path names to restricted directories, allowing attackers to read and write arbitrary files.

The vulnerability of the FortiOS operating systems is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows an attacker to read and write arbitrary files by executing commands in the command line interface...

6.7CVSS7.8AI score0.10682EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2023/03/14 9:15 p.m.21 views

Stack overflow

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin register profile can result in a stack-based buffer overflow when the name, type, or groups fields have longer values than expected. Users...

4.4CVSS7.9AI score0.00315EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/14 12:00 a.m.18 views

PT-2023-1716 · Moxa · Nport 6000 +1

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 NPort 6000 affected versions not specified NPort Windows Driver Manager affected versions not specified Description: An issue in the Cleaning makotoya mini-app on Line allows attackers to send crafted malicious notificatio...

10CVSS5.5AI score0.0036EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2023/03/14 12:00 a.m.14 views

The vulnerability of the command-line interface of SiPass IP access integrated controllers allows a hacker to execute arbitrary code.

The vulnerability of the command-line interface of SiPass IP access integrated controllers is related to errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the root user...

7.8CVSS7.6AI score0.00229EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder