CVE-2022-46756

Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an...

Design/Logic Flaw

Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an...

CVE-2022-46756

Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an...

CVE-2022-46756

CVE-2022-46756 affects Dell VxRail prior to 7.0.410. The vulnerability is a container escape that could allow a local, high-privileged attacker to run arbitrary commands on the container’s underlying OS, potentially leading to a full system takeover. The available connected documents confirm the ...

Dell EMC Metro node code injection vulnerability

Dell EMC Metro node is a Dell Dell USA application that removes physical barriers within, across, and between data centers. Dell EMC Metro node code injection vulnerability can be exploited by remote attackers to submit special requests to execute arbitrary OS commands in the application context...

CVE-2022-45928

A remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 16.2.19.1803. Multiple endpoints allow the user to pass the parameter htmlFile, which is included in the HTML output rendering pipeline of a request. Because the Content Server evaluates and executes Oscript...

CVE-2022-34456

Dell EMC Metro node, Versions prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application...

Code injection

Dell EMC Metro node, Versions prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application...

CVE-2022-34456

Dell EMC Metro node (Dell EMC Metro node) versions prior to 7.1 are affected by a code injection vulnerability. The issue allows an authenticated, non-privileged attacker to execute arbitrary OS commands within the application context. Connected sources (PT-2022-6359, CNVD-2023-14512, NVD/CVE-202...

CVE-2022-34456

Dell EMC Metro node, Versions prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application...

CVE-2022-3091

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials. In some circumstances, an attacker can exploit this vulnerability to execute operating system OS commands...

CVE-2022-43389

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15ACCC.3C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service DoS conditions on a vulnerable device...

Buffer overflow

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15ACCC.3C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service DoS conditions on a vulnerable device...

Command injection

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15ACCC.3C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request...

CVE-2022-43390

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15ACCC.3C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request...

CVE-2022-43389

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15ACCC.3C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service DoS conditions on a vulnerable device...

CVE-2022-43390

CVE-2022-43390 concerns the Zyxel NR7101 router. The flaw is a command injection in the router’s CGI program present in firmware versions prior to V1.15(ACCC.3)C0. An authenticated attacker could trigger OS command execution on the device by sending a crafted HTTP request. The issue arises from i...

CVE-2022-43389

CVE-2022-43389 describes a buffer overflow in the web server library of Zyxel NR7101 firmware prior to version V1.15(ACCC.3)C0. The vulnerability allows an unauthenticated attacker to execute OS commands or cause a DoS on a vulnerable device. Affected product: Zyxel NR7101. Root cause: overflow i...

Several vulnerabilities are addressed by Fortinet across its product range

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Fortinet addressed security vulnerabilities across its products, most notably FortiADC, which has a high-severity command injection bug listed as CVE-2022-39947 due to incorrect input validation i...

Design/Logic Flaw

login/index.php in CWP aka Control Web Panel or CentOS Web Panel 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter...