PT-2015-4178

Name of the Vulnerable Software and Affected Versions Buffalo WHR-1166DHP versions 1.60 and earlier Buffalo WSR-600DHP versions 1.60 and earlier Buffalo WHR-600D versions 1.60 and earlier Buffalo WHR-300HP2 versions 1.60 and earlier Buffalo WMR-300 versions 1.60 and earlier Buffalo WEX-300 versio...

WordPress Exploit Scanner Plugin <= 1.3.3 - Multiple Vulnerabilities

This plugin is prone to a full path disclosure and security bypass vulnerabilities. Attackers can inject PHP backdoor into web site or execute OS commands. Solution Update the plugin...

WordPress Exploit Scanner Plugin <= 1.3.3 - Multiple Vulnerabilities

This plugin is prone to a full path disclosure and security bypass vulnerabilities. Attackers can inject PHP backdoor into web site or execute OS commands. Solution Update the plugin...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

Design/Logic Flaw

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123...

Design/Logic Flaw

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-0660: Improper Access Control

Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123...

PT-2015-4787

Name of the Vulnerable Software and Affected Versions Cisco Virtual TelePresence Server Software affected versions not specified Description The issue is related to the improper restriction of the serial port use in the software, allowing local users with vSphere controller administrative...

CVE-2015-0525

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2015-0525

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

PT-2015-4689

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition ESRS VE versions 3.02 through 3.03 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For versions 3.02 and 3.03, at the moment, there is no information...

Input validation

Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2015-0977

Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2015-0977

Summary: Network Vision IntraVue on Windows is affected before version 2.3.0a14. Root cause: OS command injection due to improper handling of input ( CWE-78 ). Impact: unauthenticated remote attacker can execute arbitrary OS commands on the affected server, compromising confidentiality, integrity...

PT-2015-1315

Name of the Vulnerable Software and Affected Versions IntraVUE versions prior to 2.3.0a14 Description The issue exists due to the program's failure to neutralize special elements used in an operating system command. This allows a remote attacker to execute arbitrary OS commands. Recommendations F...

CVE-2015-0584

The image-upgrade implementation on Cisco Desktop Collaboration Experience aka Collaboration Desk Experience or DX DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947...

CVE-2015-0584

The image-upgrade implementation on Cisco Desktop Collaboration Experience aka Collaboration Desk Experience or DX DX650 endpoints allows local users to execute arbitrary OS commands via an unspecified parameter, aka Bug ID CSCus38947...

PT-2015-4730

Name of the Vulnerable Software and Affected Versions Cisco Desktop Collaboration Experience DX DX650 affected versions not specified Description The issue concerns the image-upgrade implementation, allowing local users to execute arbitrary OS commands via an unspecified parameter. Recommendation...

Design/Logic Flaw

The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via unspecified fields, aka Bug ID CSCuj40460...