2746 matches found
Security update for aaa_base (moderate)
openSUSE Security Update: Security update for aaabase Announcement ID: openSUSE-SU-2021:1544-1 Rating: moderate References: 1162581 1174504 1191563 1192248 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for aaabase fixes...
SUSE-SU-2021:3899-1 Security update for aaa_base
This update for aaabase fixes the following issues: - Allowed ping and ICMP commands without CAPNETRAW bsc1174504. - Add $HOME/.local/bin to PATH, if it exists bsc1192248. - Fixed getkernelversion.c to work also for recent kernels on the s390/X platform bsc1191563. - Support xz compressed kernel...
OPENSUSE-SU-2021:3899-1 Security update for aaa_base
This update for aaabase fixes the following issues: - Allowed ping and ICMP commands without CAPNETRAW bsc1174504. - Add $HOME/.local/bin to PATH, if it exists bsc1192248. - Fixed getkernelversion.c to work also for recent kernels on the s390/X platform bsc1191563. - Support xz compressed kernel...
Security update for aaa_base (moderate)
openSUSE Security Update: Security update for aaabase Announcement ID: openSUSE-SU-2021:3899-1 Rating: moderate References: 1162581 1174504 1191563 1192248 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for aaabase fixes...
ZOHO ManageEngine Network Configuration Manager Command Injection Vulnerability
ZOHO ManageEngine Network Configuration Manager is a multi-vendor network change, configuration and compliance management Nccm solution from ZOHO USA. A command injection vulnerability exists in ZOHO ManageEngine Network Configuration Manager, which stems from the product's Ping feature that does...
The vulnerability of the ping and tracert commands implemented in the web interface for managing Netis WF2419 router microprogramming software allows a perpetrator to execute arbitrary commands and gain unauthorized access to protected information.
The vulnerability of the ping and tracert commands in the web interface for managing Netis WF2419 microprogramming devices relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and gain...
CVE-2021-43319
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...
CVE-2021-43319
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...
CVE-2021-43319
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...
CVE-2021-43283
An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...
CVE-2021-43283
An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...
Command injection
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...
Command injection
An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...
CVE-2021-43319
Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...
Zoho Corporation Zoho ManageEngine Network Configuration Manager 命令注入漏洞
ZOHO ManageEngine Network Configuration Manager is a multi-vendor network change, configuration and compliance management Nccm solution from ZOHO USA. A command injection vulnerability exists in ZOHO ManageEngine Network Configuration Manager, which stems from the product's Ping feature that does...
Victure WR1200 操作系统命令注入漏洞
The Victure WR1200 is a router. A security vulnerability exists in the Victure WR1200 1.0.3 and prior versions, which stems from a lack of command filtering and restriction in the device's web interface, resulting in a command injection vulnerability that could be exploited by an attacker to inje...
Tp-link TL-WR840N Code Injection Vulnerability
Tp-link TL-WR840N is a wireless router from Tp-link China. tp-link TL-WR840N EU v5 router TL-WR840NEU v5 171211 firmware previous version has a security vulnerability where the PING function in the device lacks filtering and escaping for data submitted by IP address and is vulnerable to to remote...
Lantronix PremierWave 2050 操作系统命令注入漏洞
The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to OS command injection, which stems from a Web Manager Diagnostics:Ping feature that fails to properly filter special characters, commands,...
Lantronix PremierWave 2050 Web Manager Ping stack-based buffer overflow vulnerability
Summary A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...