Lucene search
+L

8016 matches found

Cvelist
Cvelist
added 2022/10/25 4:33 p.m.24 views

CVE-2022-29472

An OS command injection vulnerability exists in the web interface utilsetserialmac functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this...

10CVSS10AI score0.04433EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/25 4:33 p.m.7 views

CVE-2022-27804

An os command injection vulnerability exists in the web interface utilsetabodecode functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this...

8CVSS9.8AI score0.03635EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/10/25 4:33 p.m.47 views

CVE-2022-27804

An os command injection vulnerability exists in the web interface utilsetabodecode functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this...

8CVSS10AI score0.03635EPSS
SaveExploits1References1
CVE
CVE
added 2022/10/25 12:0 a.m.70 views

CVE-2022-35132

The CVE-2022-35132 vulnerability affects Webmin/Usermin (up to version 1.850). It allows a remote authenticated user to execute OS commands via command injection in a filename used by the GPG module. Root cause: improper handling of the GPG module filename enables command execution. Impact is hig...

8.8CVSS8.8AI score0.02799EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.19 views

PT-2022-19676 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit version 6.9Z Description: An OS command injection issue exists in the console main loop :sys functionality. A specially-crafted XCMD can lead to arbitrary command execution. An attacker can sen...

9.8CVSS8.4AI score0.02803EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.7 views

PT-2022-21735 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: The issue is related to OS command injection vulnerabilities in the XCMD testWifiAP functionality. This can lead to arbitrary command execution, allowing an...

10CVSS9.7AI score0.03244EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/10/25 12:0 a.m.29 views

Dell PowerScale OneFS OS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell, Inc. Dell PowerScale OneFS is vulnerable to an operating system command injection vulnerability that could be exploited by a privileged local attacker to compromise the entire system...

6.7CVSS5AI score0.00455EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.6 views

PT-2022-21741 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: The issue is related to OS command injection vulnerabilities in the web interface /action/wirelessConnect functionality. A specially-crafted HTTP request can...

10CVSS9.8AI score0.04222EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/10/25 12:0 a.m.9 views

PT-2022-20198 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: An OS command injection issue exists in the web interface /action/iperf functionality. A specially-crafted HTTP request can lead to arbitrary command...

10CVSS9.4AI score0.05332EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/10/24 8:35 p.m.8 views

CVE-2022-29851

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document...

9.7AI score0.03596EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/24 8:35 p.m.70 views

CVE-2022-29851

CVE-2022-29851 affects Open-Xchange OX App Suite up to v7.10.6. In a non-default configuration using ghostscript, documentconverter can perform OS command injection when converting an EPS file masquerading as a PDF. The vulnerability is tied to the EPS→PDF conversion path and non-default ghostscr...

9.8CVSS9.6AI score0.03596EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/24 8:35 p.m.32 views

CVE-2022-29851

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document...

9.9AI score0.03596EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/24 8:35 p.m.18 views

CVE-2022-29851

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document...

9.8CVSS7.3AI score0.03596EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/24 12:0 a.m.6 views

PT-2022-19878 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 7.10.6 Description: The issue allows OS Command Injection in a non-default configuration where ghostscript is used, because file conversion may occur for an EPS document disguised as a PDF document...

9.8CVSS9.6AI score0.03596EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/21 6:15 p.m.6 views

CVE-2022-34437

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters...

6.7CVSS5.8AI score0.00455EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/21 6:15 p.m.18 views

Command injection

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters...

4CVSS6.6AI score0.00455EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/21 6:5 p.m.26 views

CVE-2022-34437

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters...

6.7CVSS6.8AI score0.00455EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/21 6:5 p.m.6 views

CVE-2022-34437

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters...

6.7CVSS6.6AI score0.00455EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/21 6:5 p.m.69 views

CVE-2022-34437

CVE-2022-34437 affects Dell PowerScale OneFS 8.2.2–9.3.0 and is a local OS command-injection vulnerability that a privileged attacker could exploit to fully compromise the system, including compliance-mode clusters. The vulnerability is described across multiple sources with no exploit status pro...

6.7CVSS6.5AI score0.00455EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/21 12:0 a.m.13 views

PT-2022-22168 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2 through 9.3.0 Description: The issue is an OS command injection vulnerability that could be exploited by a privileged local malicious user, potentially leading to a full system compromise. This vulnerabili...

6.7CVSS6.5AI score0.00455EPSS
SaveExploits0References3
Rows per page
Query Builder