9973 matches found
CVE-2023-50358
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...
CVE-2025-1229
A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The...
CVE-2025-1229 olajowon Loggrove page os command injection
A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The...
CVE-2025-1229
CVE-2025-1229 affects olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. The vulnerability is an OS command injection in the path parameter of /read/?page=1&logfile=eee&match=, which can be exploited remotely. The product uses no versioning, so affected/unaffected releases aren’t s...
CVE-2025-1229 olajowon Loggrove page os command injection
A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The...
CVE-2024-8684
OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to execute OS commands on the device via the ‘php/dal.php’ endpoint, in the ‘arrSaveConfig’ parameter...
CVE-2024-50569
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...
CVE-2024-40584
An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0...
CVE-2024-50567
An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-40584
CVE-2024-40584 concerns an OS Command Injection in Fortinet products due to improper neutralization of special elements in OS commands. Affected are FortiAnalyzer (versions 7.4.0–7.4.3, 7.2.0–7.2.5, 7.0.0–7.0.13, 6.4.0–6.4.15, 6.2.2–6.2.13), FortiManager (same version ranges), FortiAnalyzer BigDa...
CVE-2024-50567
An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...
CVE-2024-50567
An improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...
CVE-2024-50567
CVE-2024-50567 is a Fortinet FortiWeb OS command injection vulnerability affecting FortiWeb versions 7.4.0 through 7.6.0. The issue arises from improper neutralization of special elements used in OS commands, allowing an attacker to execute arbitrary commands or code via crafted input. The vulner...
CVE-2024-50569
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input...
CVE-2024-50569
CVE-2024-50569 concerns Fortinet FortiWeb OS command injection in FortiWeb 7.0.0–7.6.0 due to improper neutralization of special elements in OS commands. The vulnerability enables an attacker to run arbitrary code via crafted input. Connected sources corroborate affected versions (7.0.0–7.6.0) an...
