Lucene search
+L

49 matches found

NVD
NVD
•added 2017/07/21 6:29 a.m.•32 views

CVE-2017-9980

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" aka tagipPing feature within the web interface allows performing command injection, via the "pip" parameter...

9.8CVSS9.6AI score0.02963EPSS
SaveExploits1References1
Prion
Prion
•added 2017/07/21 6:29 a.m.•26 views

Command injection

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" aka tagipPing feature within the web interface allows performing command injection, via the "pip" parameter...

7.5CVSS7.2AI score0.02963EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2017/07/21 6:00 a.m.•42 views

CVE-2017-9980

In Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, the "PING" aka tagipPing feature within the web interface allows performing command injection, via the "pip" parameter...

9.6AI score0.02963EPSS
SaveExploits1References1
NVD
NVD
•added 2015/10/15 8:59 p.m.•22 views

CVE-2015-7840

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

7.5CVSS5.1AI score0.04226EPSS
SaveExploits0References2
Prion
Prion
•added 2015/10/15 8:59 p.m.•24 views

Security feature bypass

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

7.5CVSS8.3AI score0.04226EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/15 12:00 a.m.•8 views

CVE-2015-7840: Undefined Security Weakness

The command line management console CMC in SolarWinds Log and Event Manager LEM before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature...

7.5CVSS6.6AI score0.04226EPSS
SaveExploits0References2
Prion
Prion
•added 2015/09/11 4:59 p.m.•30 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

4.3CVSS6.3AI score0.01687EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
•added 2009/07/08 12:00 a.m.•51 views

Nagios 'statuswml.cgi' Remote Arbitrary Shell Command Injection Vulnerability

Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application. Note that for an exploit to succeed,...

7.5CVSS7.4AI score0.83453EPSS
SaveExploits15References1
Exploit DB
Exploit DB
•added 2009/05/22 12:00 a.m.•43 views

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

7.5CVSS5.8AI score0.83453EPSS
SaveExploits15
Rows per page
Query Builder