9996 matches found
CVE-2024-1624
The CVE-2024-1624 entry describes an OS Command Injection vulnerability affecting the documentation server in Dassault Systèmes’ 3DEXPERIENCE platform (R2022x–R2024x), SIMULIA Abaqus (2022–2024), SIMULIA Isight (2022–2024), and CATIA Composer (R2023–R2024). The underlying issue is an OS command i...
USN-6565-1: OpenSSH vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that OpenSSH incorrectly handled supplemental groups when running helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand as a different user. An attacker could possibl...
CVE-2024-25579
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product. Note that WMC-X1800GST-B is also included in e-Mesh Starter Kit "WMC-2LX-B"...
CVE-2024-25579
CVE-2024-25579 is an OS command injection in ELECOM wireless LAN routers (notably WRC-1167GS2-B/H-B, WRC-2533GS2-B/W/V-B, WRC-X3200GST3-B, WRC-G01-W) that allows a network-adjacent attacker with administrative privileges to run arbitrary OS commands via a crafted request. Affected versions: WRC-1...
PT-2024-21016 · Elecom · Wrc-G01-W +3
Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers versions prior to the following: WRC-1167GS2-B version 1.67 WRC-1167GS2H-B version 1.67 WRC-2533GS2-B version 1.62 WRC-2533GS2-W version 1.62 WRC-2533GS2V-B version 1.62 WRC-X3200GST3-B version 1.25 WRC-G01-W versi...
Exploit for OS Command Injection in Zyxel Usg_Flex_100W_Firmware
CVE-2022-30525 Zyxel Firewall Remote Command Injection A py...
SUSE SLED15: openssh / openssh-askpass-gnome / openssh-cavs / openssh-clients / etc (SUSE-SU-2024:0596-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0596-1 advisory. - CVE-2023-51385: Limit the use of shell metacharacters in host- and user names to avoid command injectio...
CVE-2023-51450
baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability...
Command injection
baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability...
CVE-2023-51450 baserCMS OS command injection vulnerability in Installer
baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability...
CVE-2023-51450
Based on the connected sources, CVE-2023-51450 affects baserCMS prior to version 5.0.9, where an OS command injection exists in the site search feature. The root cause is improper handling/filtration of constructed command characters, enabling arbitrary command execution. Public impact statements...
CVE-2023-51450 baserCMS OS command injection vulnerability in Installer
baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability...
CVE-2024-1212 LoadMaster Pre-Authenticated OS Command Injection
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution...
CVE-2022-48624
A flaw was found in less. The closealtfile function in filename.c omits shellquote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system...
CVE-2024-1297
Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to OS Command Injection...
Command injection
Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to OS Command Injection...
CVE-2024-1297 Loomio 2.22.0 - Code injection
Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to OS Command Injection...
CVE-2024-1297
Affected software: Loomio 2.22.0. Vulnerability: OS Command Injection allowing execution of arbitrary server commands. This is the underlying root cause stated across sources, enabling an attacker to run commands with the server’s privileges. Impact (as described): high/critical in various assess...
