CVE-2017-2237

Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2017-2183

The CVE-2017-2183 issue affects KDDI HOME SPOT CUBE2 firmware versions V101 and earlier, where an OS command injection vulnerability exists in Clock Settings. Exploitation requires access to the management/clock settings UI, enabling an authenticated attacker to execute arbitrary OS commands on t...

CVE-2017-2183

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings...

PT-2017-15242

Name of the Vulnerable Software and Affected Versions HOME SPOT CUBE2 firmware versions V101 and earlier Description The issue allows authenticated attackers to execute arbitrary OS commands via Clock Settings. Recommendations For HOME SPOT CUBE2 firmware versions V101 and earlier, update to a...

Code injection

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python cod...

CVE-2017-9807

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python cod...

CVE-2017-9807

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python cod...

CVE-2017-9807

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python cod...

CVE-2017-9807: Improper Control of Generation of Code

An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval call on the contents of the "key" HTTP GET parameter. This allows an unauthenticated remote attacker to execute arbitrary Python cod...

HPE Intelligent Management Center dbman Opcode 10008 Command Injection

Binary data hpimcdbmancve-2017-5816.nbin...

Design/Logic Flaw

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7819

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7806

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7819

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7806

CVE-2016-7806 affects I-O DATA DEVICE WFS-SR01 firmware

PT-2017-9357

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE WFS-SR01 version 1.10 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For I-O DATA DEVICE WFS-SR01 version 1.10 and earlier, update to a version later than 1.10 to...

PT-2017-9370

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE TS-WRLP versions 1.01.02 and earlier I-O DATA DEVICE TS-WRLA versions 1.01.02 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. Recommendations For I-O DATA DEVICE...

CVE-2016-7819: Improper Neutralization of Special Elements used in an OS Command

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: I, Librarian PDF manager vulnerable version: =4.6 & 4.7 fixed version: 4.8 CVE number: - impact: Critical homepage:...