CVE-2023-44277

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's...

CVE-2023-44277

Dell PowerProtect DD contains an OS command injection vulnerability in the CLI. A local, low-privileged attacker could execute arbitrary OS commands on the underlying OS with the vulnerable service’s privileges, potentially leading to a full system takeover. Affected versions include prior to 7.1...

VulnCheck KEV: CVE-2023-47565

QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network...

CVE-2023-6795

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall...

Command injection

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall...

Command injection

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall...

CVE-2023-6792

CVE-2023-6792 describes an OS command injection in the XML API of Palo Alto Networks PAN-OS. An authenticated API user can exploit the XML API to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall. Affected: PAN-OS (various versions prior to th...

CVE-2023-42495

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

Command injection

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2023-42495 Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2023-42495

CVE-2023-42495 affects Dasan Networks – W-Web, versions 1.22–1.27. The issue is an OS command injection (CWE-78) caused by improper neutralization of special elements in command execution. Impact is high: remote code/process execution with network access, as reflected in the CVSS v3.1 base score ...

CVE-2023-48782

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

CVE-2023-40716

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the command line interpreter of FortiTester 2.3.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup...

Command injection

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the command line interpreter of FortiTester 2.3.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup...

Command injection

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

CVE-2023-40716

FortiTester versions 2.3.0–7.2.3 are affected by an OS command injection (CWE-78) vulnerability in the command line interpreter. An authenticated attacker with local access can craft arguments for the restore/backup operation to execute unauthorized commands. Root cause: improper neutralization o...

Siemens SCALANCE M-800/S615 Series OS Command Injection Vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers. An operating system command injection vulnerability exists in the Siemens SCALANCE M-800/S615 series, which can be exploited by an attacker to execute commands on the system via a malicious local administrator...

Siemens SCALANCE M-800/S615 Series OS Command Injection Vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers. An operating system command injection vulnerability exists in the Siemens SCALANCE M-800/S615 series, which can be exploited by an attacker to execute commands on the system...

Dasan W-Web OS Command Injection Vulnerability

Dasan W-Web is a network appliance from Dasan. An operating system command injection vulnerability exists in Dasan W-Web versions 1.22-1.27, which stems from the presence of an operating system command injection vulnerability...

CVE-2023-49692

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V7.2.2,...