2844 matches found
PT-2015-7603
Name of the Vulnerable Software and Affected Versions PC-EGG pWebManager versions prior to 3.3.10 PC-EGG pWebManager version 2.2.2 for PHP 4.x Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging the editor role. Recommendations For PC-EGG...
Design/Logic Flaw
Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data...
CVE-2015-6554
The CVE-2015-6554 issue affects Symantec Endpoint Protection Manager (SEPM) 12.1 prior to 12.1-RU6-MP3, allowing remote execution of arbitrary OS commands via crafted data sent to SEPM. Affected vector is remote, with evidence across multiple sources describing an RCE through untrusted data handl...
PT-2015-7299
Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1-RU6-MP2 Description The issue allows remote attackers to execute arbitrary OS commands via crafted data. Recommendations For Symantec Endpoint Protection Manager SEPM version...
CVE-2015-5672
TYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night + hollow ataraxia set allow remote attackers to execute arbitrary OS commands via crafted saved data...
CVE-2015-7253
The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a cookie...
CVE-2015-7901
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
Design/Logic Flaw
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
PT-2015-7659
Name of the Vulnerable Software and Affected Versions Infinite Automation Mango Automation versions 2.5.x through 2.6.0 build 430 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions 2.5.x through 2.6.0 build 430, at the moment,...
Design/Logic Flaw
McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...
PT-2015-7519
Name of the Vulnerable Software and Affected Versions McAfee Enterprise Security Manager ESM versions prior to 9.3.2MR18 McAfee Enterprise Security Manager/Log Manager ESMLM versions prior to 9.4.2MR8 McAfee Enterprise Security Manager/Receiver ESMREC versions prior to 9.5.0MR7 Description The...
Cogent DataHub Gamma Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cogent DataHub. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EvalExpresssion method, which is available remotely through the AJAX facility. Usin...
CVE-2015-4329
The administrator web interface in Cisco TelePresence Video Communication Server VCS X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796...
CVE-2015-4329
The administrator web interface in Cisco TelePresence Video Communication Server VCS X8.5.2 allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, aka Bug ID CSCuv11796...
CVE-2015-4329
The Cisco TelePresence Video Communication Server (Expressway) admin web interface (VCS X8.5.2) is affected by CVE-2015-4329 due to insufficient input validation. An authenticated, remote attacker can craft HTTP requests to execute arbitrary OS commands on the underlying device, with potential pr...
PT-2015-1963
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions X8.5.2 Description The issue exists due to insufficient input validation in the software. It allows a remote attacker to execute arbitrary OS commands using a specially crafted HTTP reques...
CVE-2015-4328: Improper Input Validation
Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests, as demonstrated by read or write operations on the Unified...
PT-2015-6027
Name of the Vulnerable Software and Affected Versions Yodobashi application versions 1.2.1.0 and earlier Description The issue allows remote attackers to execute arbitrary Java methods via a crafted HTML document, potentially obtaining sensitive information or executing OS commands. Recommendatio...
JVN#70465405: Yodobashi App for Android vulnerable to arbitrary Java method execution
Yodobashi App for Android provided by Yodobashi Camera Co.,Ltd. contains a vulnerability where an arbitrary Java method may be executed. Impact When opening a specially crafted website, an attacker may be able to execute an arbitrary Java method. As a result, information stored in Android devices...