Design/Logic Flaw

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

CVE-2015-8151

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

CVE-2015-8151

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 is affected by CVE-2015-8151, a web UI command-injection vulnerability. An authenticated remote user with console administrator access can cause arbitrary OS commands to run with elevated privileges due to improper input sanitization ...

PT-2016-3861

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access. Recommendations For Symantec Encryption...

CVE-2015-4956

The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands via unknown vectors...

CVE-2015-4956

IBM QRadar SIEM Web UI contains a remote code execution vulnerability (CVE-2015-4956) affecting QRadar SIEM 7.1.x before 7.1 MR2 Patch 12. An authenticated user could execute arbitrary operating-system commands on the underlying host through the Web UI. The public fixes are available as 7.1 MR2 P...

Design/Logic Flaw

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286...

CVE-2016-1320

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286...

CVE-2016-1320

CVE-2016-1320 : The Cisco Prime Collaboration CLI on version 9.0 and 11.0 is vulnerable to a local privilege escalation due to insufficient input sanitization, allowing a user with administrator privileges to execute arbitrary OS commands as root. The issue, tracked as Bug ID CSCux69286, affects ...

PT-2016-4707

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration versions 9.0 through 11.0 Description The issue allows local users with administrator privileges to execute arbitrary OS commands as root. This can be achieved by leveraging the CLI in the affected software...

CVE-2016-1141

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1141

KDDI HOME SPOT CUBE devices are affected by CVE-2016-1141, an OS command injection vulnerability in the application layer that allows remote authenticated users to execute arbitrary OS commands with the privileges of the affected component. Connected sources (JVNDB-2016-000012, JVN #54686544) des...

PT-2016-4599

Name of the Vulnerable Software and Affected Versions KDDI HOME SPOT CUBE devices version 2 and earlier Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions prior to 2, update to version 2 or later to resolve the issue...

CVE-2016-1141: Improper Neutralization of Special Elements used in an OS Command

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PayPal Java Serialization Vulnerability

A Java serialization vulnerability disclosed more than a year ago figured to have a long shelf life. It lived in popular Java application development frameworks such as Apache Commons Collections—where it’s been patched—and not to mention widely deployed application servers such as Oracle WebLogi...

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PT-2016-4600

Name of the Vulnerable Software and Affected Versions acmailer versions prior to 3.8.21 acmailer versions 3.9.x prior to 3.9.15 Beta Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For acmailer versions prior to 3.8.21, update to version...

CVE-2016-1142: Improper Neutralization of Special Elements used in an OS Command

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...