The vulnerability of the command-line interface of Cisco IOS XE SD-WAN software allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS exists because measures to neutralize the special elements used in the operating system’s command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Command Line Interface (CLI) of the Cisco Identity Services Engine (ISE) management platform allows a hacker to escalate their privileges.

The vulnerability of the Command Line Interface CLI of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize special elements used in the OS command line. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2022-3809 Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service

A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been...

Fortinet FortiGate和Fortinet FortiOS 格式化字符串错误漏洞

Fortinet FortiOS and Fortinet FortiGate are both products of the U.S. Fiat Fortinet Inc. Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and...

CVE-2022-26532

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versions 4.30 through 5.21, NSG series...

The vulnerability of the md_analyze_line function (md4c.c) in the MD4C parser, which relates to the use of an uninitialized resource, allows a hacker to cause a service failure.

The vulnerability of the mdanalyzeline function in the MD4C parser is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the CLI component of the Cisco IOS XR operating system, which allows a hacker to elevate their privileges to root.

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to elevate their privileges to root...

CVE-2021-34719 Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

The vulnerability of the command-line interface of the FortiWAN traffic balancing system allows a attacker to increase their privileges.

The vulnerability of the command-line interface of the FortiWAN traffic balancing system exists because measures to neutralize special elements used in the operating system’s command line are not taken. Exploiting this vulnerability can allow attackers to increase their privileges...

OPENSUSE-SU-2021:1933-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20210608 release. - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. INTEL-SA-00465 bsc1179833 See...

CVE-2021-1528

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this...

Fortinet FortiWLC安全漏洞

The Fortinet FortiWLC is a wireless LAN controller from Fortinet, Inc. A security vulnerability exists in FortiWLC that originates from a boundary error in the FortiWLC command line interface, which allows a local user to run specially crafted CLI commands to trigger a stack-based buffer overflow...

The vulnerability of the command-line utilities in MongoDB Tools, a database management system for MongoDB, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the command-line utilities in MongoDB Tools, a database management system for MongoDB, is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the command-line interface of the Cisco Unified Computing System (UCS) Manager and the Cisco FXOS operating system allows a hacker to execute arbitrary code.

The vulnerability of the command-line interface of the Cisco Unified Computing System UCS Manager and the Cisco FXOS operating system is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the command-line interface of Cisco NX-OS and FX-OS allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the command-line interface CLI of Cisco NX-OS and FX-OS network operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code with root privileges on the Linux base operating system...

EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2018-1157)

According to the version of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in mj2/opjmj2extract.c in OpenJPEG 2.3.0. The output prefix was not checked for length, which could overflow a buffer, whe...

CVE-2016-7787

CVE-2016-7787 affects KDE kdebase4-runtime/kdesu: a malicious Unicode terminator can truncate the command line, causing users to see only part of the commands that will be executed as root. This is referenced in NVD/NVD CVE entries and mirrored by Mageia MGASA-2017-0473 and OSV records; remediati...

LINE vulnerable to script injection

Overview LINE provided by LINE Corporation is an application used to communicate with others. LINE is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle...

CVE-2014-0019

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line...