2843 matches found
CVE-2016-1352
Cisco UCS Central Software (pre-1.3(1c)) is vulnerable to remote command execution via crafted HTTP requests due to improper input validation in the web framework. An unauthenticated attacker can execute arbitrary OS commands on affected systems. Cisco has released software updates addressing thi...
PT-2016-1744
Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software versions 1.31b and earlier Description The issue allows remote attackers to execute arbitrary OS commands via a crafted HTTP request. This is due to the system's failure to neutralize special...
CVE-2016-3655
The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...
CVE-2016-3654
The device management command line interface CLI in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter...
Design/Logic Flaw
The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...
Design/Logic Flaw
The device management command line interface CLI in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter...
CVE-2016-3654
The device management command line interface CLI in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter...
Palo Alto Networks PAN-OS Multiple Vulnerabilities (PAN-SA-2016-0002, PAN-SA-2016-0004)
The Palo Alto Networks PAN-OS running on the remote host is version 5.0.x prior to 5.0.18, 5.1.x prior to 5.1.11, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.10, or 7.0.x prior to 7.0.5-h2. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the GlobalProte...
Palo Alto Networks PAN-OS Multiple Vulnerabilities (PAN-SA-2016-0003, PAN-SA-2016-0005)
The Palo Alto Networks PAN-OS running on the remote host is version 5.0.x prior to 5.0.18, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.10, or 7.0.x prior to 7.0.5. It is, therefore, affected by the following vulnerabilities: - An overflow condition exists in the GlobalProtect web portal due to...
Input validation
Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticated administrators to execute arbitrary OS commands by defeating an msh aka Minimal Shell protection mechanism...
CVE-2016-2278
Affected product: Schneider Electric StruxureWare Building Operation Automation Server (AS 1.7 and earlier; AS-P 1.7 and earlier). Root cause: improper bypass of the msh minimal-shell protection allows remote authenticated administrators to execute arbitrary OS commands. Impact: remote command ex...
PT-2016-5082
Name of the Vulnerable Software and Affected Versions Schneider Electric Struxureware Building Operations Automation Server AS versions 1.7 and earlier Schneider Electric Struxureware Building Operations Automation Server AS-P versions 1.7 and earlier Description The issue allows remote...
Palo Alto PAN-OS PAN-SA-2016-0003
Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the...
Unauthenticated Command Injection in Management Web Interface
Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the...
PT-2016-5640
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 5.1.10 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions...
PT-2016-5641
Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions 7.0.4 and prior Description The management web...
CVE-2015-7769
baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2015-7769
CVE-2015-7769 affects baserCMS 3.0.2–3.0.8, where an authenticated, remote user can execute arbitrary operating-system commands via unspecified vectors (OS command injection, CWE-78). The JVN records and CNVD/NVD entries confirm the vulnerable range and project, noting the impact as arbitrary com...
PT-2016-3830
Name of the Vulnerable Software and Affected Versions baserCMS versions 3.0.2 through 3.0.8 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions 3.0.2 through 3.0.8, update to a version outside of this range to resolve the issue...