Lucene search
+L

16454 matches found

Cvelist
Cvelist
β€’added 2025/03/28 1:41 a.m.β€’42 views

CVE-2025-22398

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root...

9.8CVSS0.02022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/03/28 1:41 a.m.β€’10 views

CVE-2025-22398

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root...

9.8CVSS8.6AI score0.02022EPSS
SaveExploits0References1
CVE
CVE
β€’added 2025/03/28 1:41 a.m.β€’141 views

CVE-2025-22398

Dell Unity OS (version 5.4 and earlier) contains an OS Command Injection vulnerability that allows an unauthenticated attacker with remote access to execute arbitrary commands as root, potentially taking control of the system. Affected component is the OS command handling in Dell Unity software; ...

9.8CVSS8.6AI score0.02022EPSS
SaveExploits0References1Affected Software1
CVE
CVE
β€’added 2025/03/28 1:35 a.m.β€’88 views

CVE-2024-49563

Dell Unity is affected by CVE-2024-49563: OS Command Injection in Dell Unity versions 5.4 and earlier, permitting a local low-privilege attacker to run arbitrary OS commands with root privileges and elevate privileges. The PT-2025-13415 entry confirms affected versions and notes no information ab...

7.8CVSS7.5AI score0.00582EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
β€’added 2025/03/28 1:35 a.m.β€’11 views

CVE-2024-49563

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS7.5AI score0.00582EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/03/28 1:31 a.m.β€’8 views

CVE-2024-49564

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS7.5AI score0.00572EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2025/03/28 1:31 a.m.β€’30 views

CVE-2024-49564

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS0.00572EPSS
SaveExploits0References1
CVE
CVE
β€’added 2025/03/28 1:31 a.m.β€’96 views

CVE-2024-49564

Dell Unity is affected in CVE-2024-49564: versions 5.4 and earlier suffer OS Command Injection due to improper neutralization of special elements. A local, low-privileged attacker could run arbitrary OS commands with root privileges, elevating access. No explicit fix version is provided across th...

7.8CVSS7.5AI score0.00572EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
β€’added 2025/03/28 1:28 a.m.β€’15 views

CVE-2024-49565

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS7.4AI score0.00572EPSS
SaveExploits0References1
CVE
CVE
β€’added 2025/03/28 1:28 a.m.β€’98 views

CVE-2024-49565

Dell Unity is affected by CVE-2024-49565: versions 5.4 and earlier suffer an OS Command Injection due to improper neutralization of special elements. A low-privileged attacker with local access could potentially execute arbitrary OS commands and achieve privilege escalation. Multiple connected so...

7.8CVSS7.4AI score0.00572EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
β€’added 2025/03/28 1:28 a.m.β€’43 views

CVE-2024-49565

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS0.00572EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/03/28 1:24 a.m.β€’9 views

CVE-2025-24383

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is...

9.1CVSS8.3AI score0.01168EPSS
SaveExploits0References1
CVE
CVE
β€’added 2025/03/28 1:24 a.m.β€’85 views

CVE-2025-24383

Dell Unity OS Command Injection (CVE-2025-24383) affects Dell Unity software 5.4 and earlier. An unauthenticated, remotely accessible attacker can exploit an improper neutralization of special elements in OS commands to delete arbitrary files, including critical system files. Multiple sources (CV...

9.1CVSS8.3AI score0.01168EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
β€’added 2025/03/28 1:24 a.m.β€’32 views

CVE-2025-24383

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is...

9.1CVSS0.01168EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2025/03/28 12:00 a.m.β€’44 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

0.12811EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2025/03/28 12:00 a.m.β€’14 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

6.6AI score0.12811EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/03/28 12:00 a.m.β€’8 views

CVE-2025-28219: Improper Neutralization of Special Elements used in an OS Command

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

9.8CVSS6.6AI score0.12811EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/03/28 12:00 a.m.β€’8 views

CVE-2025-28256: Improper Neutralization of Special Elements used in an OS Command

An issue in TOTOLINK A3100R V4.1.2cu.5247B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cstemodules/wireless.so...

9.8CVSS9.1AI score0.00971EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/03/28 12:00 a.m.β€’4 views

CVE-2025-24386: Improper Neutralization of Special Elements used in an OS Command

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS7.4AI score0.00572EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2025/03/28 12:00 a.m.β€’2 views

CVE-2025-24385: Improper Neutralization of Special Elements used in an OS Command

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

7.8CVSS7.4AI score0.00527EPSS
SaveExploits0References1
Rows per page
Query Builder