JBoss 3.0.8/3.2.1 HSQLDB Remote Command Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Because of a number of...

Microsoft SQL Server 2000 sp_MScopyscript SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5309/info The Microsoft SQL Server 2000 spMScopyscript stored procedure does not sufficiently validate input before passing it to the xpcmdshell extended stored procedure. An attacker with the ability to execute a query o...

WordPress 2.1.1 wp-includes/feed.php ix Variable Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/22797/info An attacker compromised the source code for Wordpress 2.1.1 and altered it to include a malicious backdoor. This backdoor introduces a code-execution vulnerability that will let remote users inject PHP code or...

Time and Expense Management System Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5...

logstash -- Remote command execution in Logstash zabbix and nagios_nsca outputs

Elastic reports: The vulnerability impacts deployments that use the either the zabbix or the nagiosnsca outputs. In these cases, an attacker with an ability to send crafted events to any source of data for Logstash could execute operating system commands with the permissions of the Logstash...

CVE-2014-3883

Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...

Design/Logic Flaw

Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...

CVE-2014-3883

Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...

PT-2014-5575

Name of the Vulnerable Software and Affected Versions Usermin versions prior to 1.600 Description The issue allows remote attackers to execute arbitrary operating-system commands. This is related to a user action, although the specific vectors are not specified. Recommendations For versions prior...

PT-2014-3745

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS versions 5.x before 5.4 Patch 3 Description The issue allows remote attackers to execute arbitrary operating-system commands via a request to the web interface. Recommendations For versions 5.x before 5.4...

CVE-2012-4108

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary operating-system commands via crafted parameters to a file-related command, aka Bug ID CSCtq86554...

PT-2013-1646

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary operating-system commands via crafted parameters to a file-related command. Recommendations At...

Oracle Endeca Server createDataStore SOAP Request Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the controlSoapBinding web service. This service exposes...

Symantec Web Gateway < 5.1.1 Multiple Vulnerabilities (SYM13-008)

Binary data 6966.prm...

CVE-2013-3578

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...

Design/Logic Flaw

Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...

CVE-2013-2970

Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...

CVE-2013-2970

Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...

PT-2013-4070

Name of the Vulnerable Software and Affected Versions IBM QRadar Security Information and Event Manager SIEM versions prior to 7.1 MR2 Patch 1 Description The issue allows remote authenticated users to execute operating-system commands. Recommendations For versions prior to 7.1 MR2 Patch 1, updat...

CVE-2013-2970: Undefined Security Weakness

Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...