CVE-2017-2152: Improper Neutralization of Special Elements used in an OS Command

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

PT-2017-15179

Name of the Vulnerable Software and Affected Versions TS-WPTCAM versions 1.18 and earlier TS-WPTCAM2 version 1.00 TS-WLCE versions 1.18 and earlier TS-WLC2 versions 1.18 and earlier TS-WRLC versions 1.17 and earlier TS-PTCAM versions 1.18 and earlier TS-PTCAM/POE versions 1.18 and earlier...

PT-2017-15180

Name of the Vulnerable Software and Affected Versions TS-WPTCAM versions 1.18 and earlier TS-WPTCAM2 version 1.00 TS-WLCE versions 1.18 and earlier TS-WLC2 versions 1.18 and earlier TS-WRLC versions 1.17 and earlier TS-PTCAM versions 1.18 and earlier TS-PTCAM/POE versions 1.18 and earlier...

PT-2017-15206

Name of the Vulnerable Software and Affected Versions WN-G300R3 firmware versions 1.03 and earlier Description The issue allows attackers with administrator rights to execute arbitrary OS commands. Recommendations For WN-G300R3 firmware versions 1.03 and earlier, update to a version later than 1....

PT-2017-15216

Name of the Vulnerable Software and Affected Versions WNC01WH firmware versions 1.0.0.9 and earlier Description The issue allows authenticated attackers to execute arbitrary OS commands. Recommendations For WNC01WH firmware versions 1.0.0.9 and earlier, update to a version later than 1.0.0.9 to...

PT-2017-15194

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A security issue allows remote attackers to execute arbitrary OS commands via specially crafted saved data. This could potentially lead to unauthorized access and control of the system...

Design/Logic Flaw

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2017-7283

CVE-2017-7283 affects Unitrends Enterprise Backup prior to 9.1.2. An authenticated user can trigger arbitrary OS command execution by supplying a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php. The NVD data...

Sql injection

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

CVE-2016-6818

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

CVE-2016-6818: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

Design/Logic Flaw

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

PT-2017-8707

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.5 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue...

PT-2017-3054

Name of the Vulnerable Software and Affected Versions WN-G300R3 firmware versions 1.03 and earlier Description The issue is caused by a buffer overflow in the firmware, which can be exploited by a remote attacker to execute arbitrary OS commands. Recommendations For WN-G300R3 firmware versions 1....

CVE-2016-9091

Blue Coat Advanced Secure Gateway ASG 6.6 before 6.6.5.4 and Content Analysis System CAS 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges...