2260 matches found
CVE-2017-2096
smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
Design/Logic Flaw
TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlie...
CVE-2017-2096
smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2017-2152
The CVE-2017-2152 issue affects Buffalo WNC01WH network cameras (firmware 1.0.0.9 and earlier). The vulnerability is an OS command injection (CWE-78) that allows an authenticated attacker to execute arbitrary commands, via unspecified vectors. Impact is execution with the attacker’s privileges; f...
CVE-2017-2152
WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2017-2128
Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data...
CVE-2017-2112
CVE-2017-2112 is an OS command injection vulnerability in multiple I-O DATA network camera products (e.g., TS-WPTCAM/TS-WPTCAM2, TS-WLCE/TS-WLC2, TS-WRLC, TS-PTCAM/TS-PTCAM/POE). The root cause is an OS command injection via unspecified vectors, allowing a remote attacker to execute arbitrary OS ...
CVE-2017-2096
smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2017-2141
WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors...
CVE-2017-2113
Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware...
CVE-2017-2142
CVE-2017-2142 is confirmed to affect the WN-G300R3 router (firmware versions 1.03 and earlier). The root cause is a stack-based buffer overflow in the device’s firmware, allowing a remote entity to execute arbitrary OS commands on the product if they can access it. The affected product is a wirel...
CVE-2017-2113
CVE-2017-2113 is a buffer overflow vulnerability in I-O DATA network camera firmware affecting TS-WPTCAM (1.18 and earlier), TS-WPTCAM2 (1.00), TS-WLCE (1.18 and earlier), TS-WLC2 (1.18 and earlier), TS-WRLC (1.17 and earlier), TS-PTCAM (1.18 and earlier), and TS-PTCAM/POE (1.18 and earlier). The...
CVE-2017-2142
Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2017-7283
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...
Design/Logic Flaw
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...
CVE-2017-7283
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...
CVE-2017-7283
CVE-2017-7283 affects Unitrends Enterprise Backup prior to 9.1.2. An authenticated user can trigger arbitrary OS command execution by supplying a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php. The NVD data...
CVE-2016-6818
SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...
Sql injection
SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...