Cisco IOS XE SD-WAN Software 路径遍历漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A path traversal vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker could exploit...

First User Logon via Citrix Workspace App Since Command Line Deployment Receiving "Citrix Workspace is Setting up your store...”

Citrix Workspace app for Windows via Command Line and configured store URL in the process. During first user logon via Workspace App since reboot the following dialog is displayed"Citrix Workspace is setting up your store. this process will take few minutes”...

LY Corporation: SSRF occurrence in website preview used by LINE Official Account Manager (https://manager.line.biz)

LINE Official Account Manager https://manager.line.biz uses PagePoker to provide website previews. Here it was not properly validated against the Opengraph image tag target, which could point to an internal network resource...

The vulnerability of the QPDF::resolveObjectsInStream function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure due to infinite loop execution.

The vulnerability of the QPDF::resolveObjectsInStream function in the command-line PDF conversion tool is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF allows a malicious actor to cause a service failure.

The vulnerability of the PointerHolder function in the command-line PDF conversion tool QPDF is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the libqpdf.a component, a command-line utility for converting PDF documents into QPDF format, allows an attacker to cause a service failure.

The vulnerability of the libqpdf.a component of the command-line utility for converting PDF documents, QPDF, is related to the infinite execution of a loop. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDFTokenizer::resolveLiteral command-line utility for converting QPDF documents is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Zsh shell script interpreter on UNIX systems arises from the lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Shebang handler in the UNIX command shell Zsh is related to the shortening of the Shebang line that exceeds 64 characters. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

[SECURITY] Fedora 34 Update: kde-cli-tools-5.21.3-1.fc34

Provides several KDE and Plasma specific command line tools to allow better interaction with the system...

Fedora: Security Advisory for kde-cli-tools (FEDORA-2021-85c9774673)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GHSA-4RV9-5VC4-88CG Command injection in node-ps

This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js...

Command injection in node-ps

This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Information Disclosure Vulnerability

MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 is vulnerable to an information disclosure. An attacker could use this vulnerability to obtain...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Trust Management Issue Vulnerability

MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. mb CONNECT LINE mymbCONNECT24 and mbCONNECT24 have a trust management issue Vulnerability. No detailed vulnerability details are currently...

Cisco IOS XR Software for 8000 Series Routers Network Convergence System 540 Series Routers Privilege Escalation (cisco-sa-iosxr-pe-QpzCAePe)

According to its self-reported version, Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images is affected by an privilege escalation vulnerability in its CLI command due to insufficient validation of command line...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Cross-Site Scripting Vulnerability (CNVD-2021-56802)

MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 are vulnerable to cross-site scripting. No detailed vulnerability details are currently availabl...

USN-4839-1: python-gnupg vulnerabilities

Marcus Brinkmann discovered that python-gnupg improperly handled certain command line parameters. A remote attacker could use this to spoof the output of python-gnupg and cause unsigned e-mail to appear signed. CVE-2018-12020 It was discovered that python-gnupg incorrectly handled the GPG...

USN-4785-1: npm vulnerability

It was discovered that the npm command-line interface mishandled certain sensitive information. An attacker could use this vulnerability to collect authentication information that could be used to impersonate other users...

The vulnerability of the command-line interface (CLI) of the vManage web interface for programmatically defined Cisco SD-WAN networks allows a attacker to compromise the integrity of protected information.

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Critical Security Bug Can Knock Smart Meters Offline

Critical security vulnerabilities in Schneider Electric smart meters could allow an attacker a path to remote code execution RCE, or to reboot the meter causing a denial-of-service DoS condition on the device. Schneider Electric’s PowerLogic ION/PM smart meter product line, like other smart meter...