Palo Alto Networks PAN-OS Multiple Vulnerabilities (PAN-SA-2016-0003, PAN-SA-2016-0005)

The Palo Alto Networks PAN-OS running on the remote host is version 5.0.x prior to 5.0.18, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.10, or 7.0.x prior to 7.0.5. It is, therefore, affected by the following vulnerabilities: - An overflow condition exists in the GlobalProtect web portal due to...

Palo Alto Networks PAN-OS Multiple Vulnerabilities (PAN-SA-2016-0002, PAN-SA-2016-0004)

The Palo Alto Networks PAN-OS running on the remote host is version 5.0.x prior to 5.0.18, 5.1.x prior to 5.1.11, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.10, or 7.0.x prior to 7.0.5-h2. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the GlobalProte...

Input validation

Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeating an msh aka Minimal Shell protection mechanism...

CVE-2016-2278

Affected product: Schneider Electric StruxureWare Building Operation Automation Server (AS 1.7 and earlier; AS-P 1.7 and earlier). Root cause: improper bypass of the msh minimal-shell protection allows remote authenticated administrators to execute arbitrary OS commands. Impact: remote command ex...

Palo Alto PAN-OS PAN-SA-2016-0003

Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the...

Unauthenticated Command Injection in Management Web Interface

Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the...

CVE-2015-7769

baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2015-7769

CVE-2015-7769 affects baserCMS 3.0.2–3.0.8, where an authenticated, remote user can execute arbitrary operating-system commands via unspecified vectors (OS command injection, CWE-78). The JVN records and CNVD/NVD entries confirm the vulnerable range and project, noting the impact as arbitrary com...

CVE-2015-8151

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

Design/Logic Flaw

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

CVE-2015-8151

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 is affected by CVE-2015-8151, a web UI command-injection vulnerability. An authenticated remote user with console administrator access can cause arbitrary OS commands to run with elevated privileges due to improper input sanitization ...

CVE-2015-8151

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

CVE-2015-4956

The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown vectors...

CVE-2015-4956

IBM QRadar SIEM Web UI contains a remote code execution vulnerability (CVE-2015-4956) affecting QRadar SIEM 7.1.x before 7.1 MR2 Patch 12. An authenticated user could execute arbitrary operating-system commands on the underlying host through the Web UI. The public fixes are available as 7.1 MR2 P...

Design/Logic Flaw

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286...

CVE-2016-1320

CVE-2016-1320 : The Cisco Prime Collaboration CLI on version 9.0 and 11.0 is vulnerable to a local privilege escalation due to insufficient input sanitization, allowing a user with administrator privileges to execute arbitrary OS commands as root. The issue, tracked as Bug ID CSCux69286, affects ...

CVE-2016-1320

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286...

CVE-2016-1141

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1141

KDDI HOME SPOT CUBE devices are affected by CVE-2016-1141, an OS command injection vulnerability in the application layer that allows remote authenticated users to execute arbitrary OS commands with the privileges of the affected component. Connected sources (JVNDB-2016-000012, JVN #54686544) des...