Lucene search
+L

8012 matches found

NVD
NVD
added 2022/02/11 9:15 a.m.15 views

CVE-2022-0557

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

9CVSS0.51193EPSS
SaveExploits4References4
Cvelist
Cvelist
added 2022/02/11 8:45 a.m.37 views

CVE-2022-0557 OS Command Injection in microweber/microweber

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

8.1CVSS7.4AI score0.51193EPSS
SaveExploits4References4
CVE
CVE
added 2022/02/11 8:45 a.m.150 views

CVE-2022-0557

CVE-2022-0557 describes an OS Command Injection in the Packagist Microweber/Microweber package prior to version 1.2.11. Public advisories and exploits indicate an authenticated remote code execution path via uploaded content or crafted inputs that bypass input validation, enabling an attacker to ...

9CVSS7.2AI score0.51193EPSS
SaveExploits4References4Affected Software1
OSV
OSV
added 2022/02/11 8:45 a.m.19 views

CVE-2022-0557 OS Command Injection in microweber/microweber

OS Command Injection in Packagist microweber/microweber prior to 1.2.11...

8.1CVSS7.5AI score0.51193EPSS
SaveExploits4References6
Github Security Blog
Github Security Blog
added 2022/02/10 11:48 p.m.34 views

OS Command Injection in install-package

install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...

9.8CVSS9.3AI score0.04118EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/02/10 11:47 p.m.16 views

GHSA-H9V8-RM3M-5H5F OS Command Injection in git-add-remote

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

9.8CVSS6.2AI score0.04118EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/02/10 11:45 p.m.49 views

Withdrawn Advisory: OS Command Injection in effect

Withdrawn Advisory This advisory has been withdrawn because the npm package effect, for which alerts were issued, does not correspond with https://github.com/Javascipt/effect, the repository with the vulnerable code. https://github.com/Javascipt/effect is not in any supported ecosystem...

9.8CVSS9.9AI score0.04118EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/02/10 11:42 p.m.24 views

GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

9.8CVSS9.8AI score0.04232EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/10 11:37 p.m.25 views

GHSA-C5HM-XC74-PQRG OS Command Injection in jscover

jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...

9.8CVSS6.2AI score0.035EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/02/10 8:20 p.m.57 views

OS Command Injection and Command Injection in kill-port-process

The kill-port-process package prior to version 2.2.0 is vulnerable to a Command Injection...

10CVSS8.4AI score0.04003EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2022/02/10 12:0 a.m.69 views

Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL OS Command Injection Vulnerability

Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL are both 4G/4.5G, WiFi and Vpn technology based mobile network routers from Ricon Mobile Canada.Ricon Mobile Ricon Industrial Cellular Router S9922L and S9922XL are vulnerable to OS command injection, which can be exploited by...

10CVSS6.8AI score0.02182EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/09 11:15 p.m.5 views

CVE-2021-26616

An OS command injection was found in SecuwaySSL, when special characters injection on execute command with runCommand arguments...

9.8CVSS5.8AI score
SaveExploits0References1
Prion
Prion
added 2022/02/09 11:15 p.m.30 views

Command injection

An OS command injection was found in SecuwaySSL, when special characters injection on execute command with runCommand arguments...

7.5CVSS9.8AI score0.00884EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2022/02/09 10:50 p.m.38 views

push-dir Enables OS Command Injection

push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable opt.branch is not validated before being provided to the git command within index.jsL139. This could be abused by an attacker to inject arbitrary commands...

9.8CVSS9.1AI score0.02836EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2022/02/09 10:5 p.m.63 views

CVE-2021-26616

CVE-2021-26616 describes an OS command injection in SecuwaySSL. The root cause is injection via special characters in the runCommand argument when commands are executed, allowing an attacker to influence the host OS. Documents indicate a network-based, low-attack-complexity vector with either no ...

9.8CVSS9.2AI score0.00884EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/02/09 12:0 a.m.38 views

Reolink RLC-410W OS Command Injection Vulnerability (CNVD-2022-12809)

Reolink Rlc-410W is a Wifi security camera from Reolink China.The device network settings feature of Reolink RLC-410W v3.0.0.13620121102 is vulnerable to OS command injection, which can be exploited by attackers to execute arbitrary commands...

9.1CVSS5.7AI score0.04695EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.42 views

Reolink RLC-410W OS Command Injection Vulnerability (CNVD-2022-12810)

Reolink Rlc-410W is a Wifi security camera from Reolink China.The device network settings feature of Reolink RLC-410W v3.0.0.13620121102 is vulnerable to OS command injection, which can be exploited by attackers to execute arbitrary commands...

9.8CVSS5.7AI score0.03657EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.45 views

Reolink RLC-410W OS Command Injection Vulnerability

Reolink Rlc-410W is a Wifi security camera from Reolink China.The device network settings feature of Reolink RLC-410W v3.0.0.13620121102 is vulnerable to OS command injection, which can be triggered by an attacker by sending an HTTP request to execute arbitrary commands...

9.1CVSS1.8AI score0.47915EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/02/09 12:0 a.m.34 views

Reolink RLC-410W OS Command Injection Vulnerability (CNVD-2022-10726)

Reolink Rlc-410W is a Wifi security camera from Reolink China.The device network settings feature of Reolink RLC-410W v3.0.0.13620121102 is vulnerable to OS command injection, which can be exploited by attackers to cause OS command injection...

9.1CVSS4.3AI score0.27477EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/08 11:15 a.m.7 views

CVE-2022-21241

Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via a specially crafted CSV file that contains HTML a tag...

9.6CVSS7.3AI score0.03174EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder