8016 matches found
CVE-2023-32956
Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2023-32956
CVE-2023-32956 affects Synology Router Manager (SRM) via an OS command injection vulnerability in the CGI component. Impact is remote arbitrary code execution with high severity (CVSSv3.1: 9.8, network vector, no user interaction, privileges: none; confidentiality, integrity, availability all hig...
CVE-2023-32955
Synology SRM is affected by CVE-2023-32955 due to an OS command injection in the DHCP Client functionality. The root cause is improper neutralization of special elements used in a system call, allowing network-adjacent attackers to execute arbitrary commands. Documents from ZDI state exploitation...
CVE-2023-32955
Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...
CVE-2023-32955
Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...
CVE-2020-13378
Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...
CVE-2020-13378
Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...
CVE-2020-13378
CVE-2020-13378 affects Loadbalancer.org Enterprise VA MAX up to version 8.3.8. The issue is an OS command injection in the appliance that could allow a remote authenticated attacker to execute arbitrary code. CVSS v3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileg...
CVE-2022-29841
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that was caused by a command that read files from a privileged location and created a system command without sanitizing the read data. This command could be triggered by an attacker remotely to...
CVE-2022-29841
CVE-2022-29841 is an OS Command Injection affecting Western Digital My Cloud OS 5 prior to 5.26.119. The flaw arises from a command that reads files from a privileged location and creates a system command without proper sanitization, enabling remote code execution and a reverse shell when exploit...
OS Command Injection
Apache Spark is vulnerable to OS command injection. The authentication filter checks if a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter may allow someone to impersonate an arbitrary user name and execute a Unix shell command...
OS Command Injection
kiwitcms is vulnerable to OS Command Injection. The vulnerability exists because the github.headref key in changelog.yml does not properly check the workflow, which allows an attacker to gain write access to file configurations...
CVE-2021-27280
OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected...
CVE-2021-27280
The CVE-2021-27280 vulnerability affects mblog version 3.5.0 and is described as an OS command injection vulnerability that allows an attacker to execute arbitrary code through a crafted theme selected in the UI. The root cause is tied to what the sources label as a command injection weakness in ...
CVE-2021-27280
OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected...
PT-2023-12116 · Mblog · Mblog
Name of the Vulnerable Software and Affected Versions: mblog version 3.5.0 Description: The issue allows attackers to execute arbitrary code via a crafted theme when it gets selected. This is due to an OS Command injection vulnerability. Recommendations: For mblog version 3.5.0, update to a newer...
CVE-2023-2564
OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0...
Command injection
OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0...