9982 matches found
GHSA-5QWW-56GC-F66C GoCast OS Command Injection vulnerability
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability...
Vulnerability fixed in FortiManager
Fortinet has fixed a vulnerability in FortiManager. The vulnerability is in the OS command injection in FortiManager, which allows authenticated remote attackers to execute unauthorized code via specially crafted FGFM requests. Fortinet has released updates to fix the vulnerability. See attached...
CVE-2021-26115
An OS command injection CWE-78 vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection CWE-78 vulnerability in FortiWA...
CVE-2021-26115
An OS command injection CWE-78 vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection CWE-78 vulnerability in FortiWA...
CVE-2021-26115
An OS command injection CWE-78 vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection CWE-78 vulnerability in FortiWA...
Dell RecoverPoint for Virtual Machines OS Command Injection Vulnerability
Dell RecoverPoint for Virtual Machines is a data protection and recovery solution for virtual machine environments. An OS command injection vulnerability exists in Dell RecoverPoint for Virtual Machines. The vulnerability stems from a lack of proper validation of user input. An attacker could use...
CVE-2024-48889
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below,...
CVE-2024-48889
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below,...
CVE-2024-48889
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below,...
CVE-2024-48889
FortiManager OS Command Injection (CVE-2024-48889) affects FortiManager and FortiManager Cloud across multiple versions (e.g., 7.6.0, 7.4.x, 7.2.x, 7.0.x, 6.4.x) via FGFM crafted requests. Root cause: improper neutralization of special elements in OS commands, enabling an authenticated remote att...
CVE-2024-48889
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below,...
CVE-2024-53688
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to execute an arbitrary OS command using a crafted HTTP request...
CVE-2024-53688
The CVE-2024-53688 issue affects FXC AE1021 and AE1021PE devices (firmware 2.0.10 and earlier). It is an OS command injection where a logged-in user can execute arbitrary OS commands via a crafted HTTP request, due to improper neutralization of special elements. The vulnerability impact is descri...
CVE-2024-53688
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to execute an arbitrary OS command using a crafted HTTP request...
CVE-2024-53688
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to execute an arbitrary OS command using a crafted HTTP request...
VulnCheck KEV: CVE-2024-12686
BeyondTrust Privileged Remote Access PRA and Remote Support RS contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to...
Reolink Multiple IP Cameras OS Command Injection Vulnerability
Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root...
PT-2024-35808 · Ae1021Pe +1 · Ae1021Pe +1
Name of the Vulnerable Software and Affected Versions: AE1021 firmware versions 2.0.10 and earlier AE1021PE firmware versions 2.0.10 and earlier Description: An issue exists due to the improper neutralization of special elements used in an OS command, which may allow a logged-in user to execute a...
PT-2024-9736
Name of the Vulnerable Software and Affected Versions FortiManager versions 7.6.0, 7.4.4 and below, 7.2.7 and below, 7.0.12 and below, 6.4.14 and below FortiManager Cloud versions 7.4.4 and below, 7.2.7 to 7.2.1, 7.0.12 to 7.0.1 Description The issue is related to an Improper Neutralization of...