CVE-2022-0851

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the activation key via the process command line v...

OESA-2022-1862 tcpdump security update

Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Security Fixes: The command-lin...

The vulnerability of the command-line interface (CLI) of the networking operating system FXOS allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface CLI of the networking operating system FXOS exists because measures to neutralize the special elements used in the operating system’s commands have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Mageia: Security Advisory (MGASA-2022-0294)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2022-1661442764 Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849

CVE-2022-2849: fix invalid memory access with for loop over NULL string - CVE-2022-2845: fix reading before the start of the line...

Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849

CVE-2022-2849: fix invalid memory access with for loop over NULL string - CVE-2022-2845: fix reading before the start of the line...

CLSA-2022-1661441989 Fixed CVEs in vim: CVE-2022-2845, CVE-2022-2849

CVE-2022-2849: fix invalid memory access with for loop over NULL string - CVE-2022-2845: fix reading before the start of the line...

Improper token validation leading to code execution in Teleport

Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social...

The vulnerability of the QPDF::processXRefStream function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDF::processXRefStream command-line utility for converting PDF documents is related to the lack of resource release after the expiration of its useful period. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2022-37111

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...

CVE-2022-37112

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

CVE-2022-37113

Bluecms 1.6 has SQL injection in line 132 of admin/area.php...

CVE-2022-37112

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...

CVE-2022-37113

Bluecms 1.6 has SQL injection in line 132 of admin/area.php...

BlueCMS SQL注入漏洞

BlueCMS is a PHP and MySQL based content management system CMS. a security vulnerability exists in BlueCMS version 1.6, which stems from an SQL injection in line 55 of admin/model.php. No details of the vulnerability are currently available...

Error: User not authorized to execute this command when executing commands via CLI or GUI

Local User Receives:ERROR: Not authorized to execute this commandon CLI and in GUI. CLI GUI...

BusyBox 缓冲区错误漏洞

BusyBox is a set of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox that stems from a stack overflow vulnerability in ash.c:6030...

BlueCMS SQL注入漏洞

BlueCMS is a PHP and MySQL based content management system CMS. a security vulnerability exists in BlueCMS version 1.6, which stems from an SQL injection in line 132 of admin/article.php. No detailed vulnerability details are available at this time...

CVE-2022-31238

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure...

The vulnerability of the command-line interface (CLI) of Zyxel network device software allows a hacker to trigger a service failure.

The vulnerability of the command-line interface CLI of Zyxel network device software implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...