4689 matches found
NewStart CGSL MAIN 6.02 : samba Multiple Vulnerabilities (NS-SA-2024-0054)
The remote NewStart CGSL host, running version MAIN 6.02, has samba packages installed that are affected by multiple vulnerabilities: - Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted...
ImageMagick Improper Input Validation Vulnerability
ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image...
SUSE CVE-1999-0043
Command execution via shell metachars in INN daemon innd 1.5 using "newgroup" and "rmgroup" control messages, and others...
SUSE CVE-1999-0067
phf CGI program allows remote command execution through shell metacharacters...
CVE-2024-31977
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility...
CVE-2024-31977
CVE-2024-31977 affects Adtran 834-5 devices (firmware 11.1.0.101-202106231430) with a root cause in the Ping/Traceroute utilities where shell metacharacters allow OS command injection. The vulnerability is addressed by SmartOS version 12.6.3.1 or later; SMARTOS fixes have been backported to the 1...
CVE-2024-31977
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility...
Adtran 834-5 操作系统命令注入漏洞
The Adtran 834-5 is a Gigabit Ethernet gateway from Adtran USA. An operating system command injection vulnerability exists in the Adtran 834-5 version 11.1.0.101-202106231430, which stems from the device allowing OS commands to be injected into the Ping or Traceroute utility via shell...
AlmaLinux 8 : less (ALSA-2024:4256)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:4256 advisory. less: OS command injection CVE-2024-32487 less: missing quoting of shell metacharacters in LESSCLOSE handling CVE-2022-48624 Tenable has extracted the...
Important: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: OS command injection...
ALSA-2024:4256 Important: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: OS command injection...
RHEL 8 : less (RHSA-2024:4256)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4256 advisory. The less utility is a text file browser that resembles more, but allows users to move backwards in the file as well as forwards. Since less...
VulnCheck KEV: CVE-2019-20504
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...
CVE-2014-5470
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation...
CVE-2014-5470
CVE-2014-5470 affects Actual Analyzer (versions prior to 2014-08-29). The vulnerability arises from untrusted input being passed to an eval operation, enabling code execution via shell metacharacters in the input data. Connected sources show concrete details: the flaw exists in Actual Analyzer’s ...
CVE-2014-5470
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation...
GNU Global Code Execution Vulnerability
GNU Global is a free code tagging system for the US GNU community. A code execution vulnerability exists in GNU Global that stems from the use of shell metacharacters, no details of the vulnerability are provided at this time...
Actual Analyzer Security Vulnerability
Actual Analyzer is a PHP tool for monitoring website traffic from Actual Analyzer, Inc. A security vulnerability exists in Actual Analyzer that stems from the use of untrusted input for some of the input data passed to the eval operation, which allows code execution via shell metacharacters...
PT-2024-10557 · Unknown · Actual Analyzer
Name of the Vulnerable Software and Affected Versions: Actual Analyzer versions prior to 2014-08-29 Description: The issue allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation. Recommendations: For versions prior to...
