Custom application fails to launch when the command line exceeds 203 characters

Custom application fails to launch when the command line exceeds 203 characters. Application appears to launch and then disappears...

The vulnerability of the command-line interface of the microprogramming software for Cisco Analog Telephone Adapter (ATA) series 190 allows a perpetrator to execute arbitrary commands.

The vulnerability of the command-line interface of microprogramming software for Cisco Analog Telephone Adapter ATA series 190 devices exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an...

The vulnerability of the undici.request method in the HTTP/1.1 client of the Undici software platform for Node.js allows attackers to inject arbitrary HTTP headers.

The vulnerability of the undici.request method in the Node.js software platform relates to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

Fortinet FortiWeb Stack-based buffer overflow in command line interpreter (FG-IR-21-132)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-132 advisory. - Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated...

The vulnerability of Firefox’s command-line interface for browsing, accessing bookmarks, and viewing history is related to the creation of temporary files with insecure permissions. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of Firefox’s command-line interface for reading, viewing bookmarks, and accessing history is related to the creation of temporary files with insecure permissions in the /tmp directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the command-line interface of Cisco Firepower Threat Defense (FTD) software allows a malicious actor to gain unauthorized access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the command-line interface of Cisco Firepower Threat Defense FTD microprogramming systems is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or cause servic...

Fortinet Fortigate Buffer overflow in TFTP client library of CLI (FG-IR-21-173)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-173 advisory. - A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an...

Fortinet Fortigate Format string vulnerability in command line interpreter (FG-IR-21-235)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-235 advisory. - A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC...

Fortinet Fortigate ] Sensitive information is displayed in cleartext in the CLI window when using diagnose sys ha checksum command (FG-IR-20-009)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-009 advisory. - A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier...

CVE-2024-47158

N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website...

CVE-2024-47158

The CVE-2024-47158 vulnerability affects N-LINE 2.0.6 and earlier, where improper input validation (CWE-94) allows code injection that can execute arbitrary code in the instructor’s browser or redirect to a malicious site. Public sources (JVN/NVD) indicate the issue affects N-LINE 2.0.6 and prior...

CVE-2024-47158

N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website...

PT-2024-32445 · N-Line · N-Line

Name of the Vulnerable Software and Affected Versions: N-LINE versions 2.0.6 and prior Description: The issue allows for code injection, potentially leading to the execution of arbitrary code on the instructor's browser or redirection to a malicious website. Recommendations: For N-LINE versions...

UBUNTU-CVE-2024-46478

HTMLDOC v1.9.18 contains a buffer overflow in parsepre function,ps-pdf.cxx:5681...

[SECURITY] Fedora 39 Update: koji-1.35.1-1.fc39

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

The vulnerability of the PFE (evo-pfemand) control demon in JunOS Evolved operating systems allows a intruder to trigger a service failure.

The vulnerability of the PFE evo-pfemand control demon for JunOS Evolved is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures by executing arbitrary commands through the command line interface, or by sending...

The vulnerability of the command-line interface (CLI) of the Junos OS Evolved router operating system, allowing a attacker to cause a service failure

The vulnerability of the command-line interface CLI of the Junos OS Evolved router operating system QFX5000, where resources are not properly cleaned or released. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Important: Red Hat Security Advisory: Red Hat build of Cryostat security update

An update is now available for the Red Hat build of Cryostat 3 on RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Zyxel USG FLEX 安全漏洞

Zyxel USG FLEX is a firewall from China Hopkins Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel USG FLEX that stems from inadequate protection against credentials in CLI...

CLSA-2024-1729518310 Fix of 15 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-38632 - vfio/pci: fix potential memory leak in vfiointxenable CVE-url: https://ubuntu.com/security/CVE-2024-46840 - btrfs: clean up our handling of refs == 0 in snapshot delete CVE-url: https://ubuntu.com/security/CVE-2024-44954 - ALSA: line6: Fix rac...