SUSE SLES12 Security Update : less (SUSE-SU-2024:1550-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1550-1 advisory. - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. bsc1222849 Tenable has...

SUSE: Security Advisory (SUSE-SU-2024:1550-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1550-1 Security update for less

This update for less fixes the following issues: - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. bsc1222849...

CVE-2024-4582 Faraday GM8181/GM828x NTP Service os command injection

A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntpsrv leads to os command injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-4582

The CVE-2024-4582 entry concerns Faraday GM8181 and GM828x devices, where an unknown function in the NTP Service is vulnerable to command injection via manipulation of the ntp_srv argument. This enables remote attack capability and, per the description, exploits have been disclosed publicly and u...

CVE-2024-4582 Faraday GM8181/GM828x NTP Service os command injection

A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntpsrv leads to os command injection. It is possible to launch the attack remotely. The exploit has bee...

SUSE SLES15 Security Update : less (SUSE-SU-2024:1534-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1534-1 advisory. - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. bsc1222849 Tenable has...

VulnCheck KEV: CVE-2021-21872

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

SUSE-SU-2024:1534-1 Security update for less

This update for less fixes the following issues: - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. bsc1222849...

OS Command Injection

sagemaker is vulnerable to OS Command Injection. The vulnerability is due to the capturedependencies function in the sagemaker.serve.saveretrive.version100.save.utils module. An attacker can execute arbitrary code or cause a denial of service by passing an inappropriate command as the...

CVE-2024-4509

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...

CVE-2024-4508

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/staticrouteeditipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command injection. It is...

CVE-2024-4510

Ruijie RG-UAC up to 20240428 is affected by an OS command injection in the file /view/networkConfig/ArpTable/arp_add_commit.php, triggered by manipulating the text_ip_addr/text_mac_addr arguments. Exploitation can occur remotely and has been disclosed publicly. Effective root cause: improper hand...

CVE-2024-4510 Ruijie RG-UAC arp_add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/networkConfig/ArpTable/arpaddcommit.php. The manipulation of the argument textipaddr/textmacaddr leads to os command injection. The atta...

CVE-2024-4510 Ruijie RG-UAC arp_add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/networkConfig/ArpTable/arpaddcommit.php. The manipulation of the argument textipaddr/textmacaddr leads to os command injection. The atta...

CVE-2024-4509 Ruijie RG-UAC add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...

CVE-2024-4509

CVE-2024-4509 affects Ruijie RG-UAC up to 20240428. The vulnerability is an OS command injection in the PHP endpoint /view/IPV6/naborTable/add_commit.php, triggered by manipulating the ip_addr/mac_addr arguments. It can be exploited remotely, and public disclosure of the exploit is noted. Affecte...

CVE-2024-4509 Ruijie RG-UAC add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...

CVE-2024-4507

A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/staticrouteaddipv6.php. The manipulation of the argument textprefixlen/textgateway/devname leads to os command injection. The...

CVE-2024-4508 Ruijie RG-UAC static_route_edit_ipv6.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/staticrouteeditipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command injection. It is...