1797 matches found
CVE-2015-4330: Improper Neutralization of Special Elements used in an OS Command
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
PT-2015-1964
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.2 Description The issue allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests. This is due to insufficient input validation in the device's...
CVE-2015-2980: Improper Neutralization of Special Elements used in an OS Command
The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document...
CVE-2015-2979: Improper Neutralization of Special Elements used in an OS Command
Webservice-DIC yoyakuv41 allows remote attackers to execute arbitrary OS commands via unspecified vectors...
PT-2016-2022
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.42 PHP versions 5.5.x prior to 5.5.26 PHP versions 5.6.x prior to 5.6.10 Description The issue allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line...
CVE-2015-4237
The CLI parser in Cisco NX-OS 4.12E11, 6.211b, 6.212, 7.20ZZ99.1, 7.20ZZ99.3, and 9.11SV13.1.8 on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and...
CVE-2015-4186
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...
Input validation
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...
CVE-2015-4183
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
CVE-2015-4186
The CVE affects Cisco Virtualization Experience Client 6215 devices running firmware 11.2(27.4). The diagnostics subsystem of the administrative web interface does not properly sanitize input passed to a diagnostics option, enabling an authenticated, local attacker to execute arbitrary OS command...
PT-2015-1325
Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software version 1.21a Description The issue allows local users to gain privileges for OS command execution via a crafted CLI parameter. This is due to the system's failure to neutralize special elements used in the OS comman...
PT-2015-1326
Name of the Vulnerable Software and Affected Versions Cisco Virtualization Experience VXC Client 6215 version 11.227.4 Description The diagnostics subsystem in the administrative web interface allows local users to gain privileges for OS command execution via a crafted option value. This issue...
CVE-2015-4186: Improper Neutralization of Special Elements used in an OS Command
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...
CVE-2015-4183: Improper Neutralization of Special Elements used in an OS Command
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
CVE-2015-2955
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
PT-2015-6003
Name of the Vulnerable Software and Affected Versions Igreks MilkyStep Light versions 0.94 and earlier Igreks MilkyStep Professional versions 1.82 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For Igreks MilkyStep Light versions 0.94 a...
CVE-2015-2955: Improper Neutralization of Special Elements used in an OS Command
Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2014-9284
The CVE-2014-9284 entry concerns Buffalo wireless routers, specifically WHR-1166DHP, WSR-600DHP, WHR-600D, WHR-300HP2, WMR-300, WEX-300, and BHR-4GRV2 with affected versions 1.60 (or 1.04 for BHR-4GRV2) and earlier. The issue is an OS command injection vulnerability that can be exploited by an au...
SAP NetWeaver - internal special account password leak
Application: SAP Netweaver Versions Affected: SAP Netweaver 7.4 Vendor URL: SAP Bugs: Coding error, Reading sensitive user data Send: 05.09.2015 Reported: 05.09.2015 Vendor response: 06.09.2015 Date of Public Advisory: 08.12.2015 Reference: SAP Security Note 2240946 Author: Dmitry Chastuhin,...
