CVE-2007-4038

Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a mailto URI, which...

CVE-2004-1170

a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename...

CVE-1999-0210

Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

Command injection

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

CVE-2015-7698

CVE-2015-7698 affects ownCloud Server’s external legacy SMB storage. The issue arises from inadequate neutralization of special characters in SMB user input, enabling remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument (affecting listShares i...

CVE-2015-7698

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

The vulnerability of the Internet Information Services software allows a perpetrator to cause a service failure or execute arbitrary code.

The Internet Information Services software package contains a vulnerability in the ftpsvc2.dll module, located in the C:\Windows\system32\inetsrv directory. This vulnerability allows an attacker to cause a stack buffer overflow in a function that converts a path to a directory into its final form...

Gentoo Security Advisory GLSA 201402-27

Gentoo Linux Local Security Checks GLSA 201402-27 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Code injection

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

CVE-2015-5082

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...

CVE-2015-5082

Endian Firewall OS Command Injection vulnerability (CVE-2015-5082) affects Endian Firewall where the CGI script cgi-bin/chpasswd.cgi fails to properly sanitize NEW_PASSWORD_1/NEW_PASSWORD_2, enabling remote command execution via shell metacharacters. Public references document related exploits an...

MediaWiki Quiz Extension Denial of Service Vulnerability

MediaWiki is a free, web-based wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers for the deployment of in-house knowledge management and content management systems.Quiz is an extension of the quiz builder. A security vulnerability exists in the MediaWiki Qu...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression...

CVE-2015-6736

The CVE-2015-6736 entry concerns the MediaWiki Quiz extension, where remote attackers can trigger a denial-of-service through regex metacharacters in a regular expression. Affected component: Quiz extension for MediaWiki. Root cause: improper handling of regex metacharacters leading to DoS. Impac...

TOTOLINK Router Models Code Execution Vulnerability

TOTOLINK manufactures routers, wireless access points and networking equipment. A code execution vulnerability exists in TOTOLINK Router Models. It allows remote attackers to execute arbitrary commands in the hostname field via shell metacharacters...

Code injection

The escapecommand function in include/Administration/corePerformance/getStats.php in Centreon formerly Merethis Centreon 2.5.4 and earlier fixed in Centreon 19.10.0 uses an incorrect regular expression, which allows remote authenticated users to execute arbitrary commands via shell metacharacters...