CVE-2022-46414

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal...

Design/Logic Flaw

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

CVE-2022-37923

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37922

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37920

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

PT-2022-26957 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.2.1.1 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.1.3.1 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.0.7.1 Aruba EdgeConnect Enterprise Softwa...

PT-2022-27226 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions 9.2.1.0 and below Aruba EdgeConnect Enterprise Software versions 9.1.3.0 and below Aruba EdgeConnect Enterprise Software versions 9.0.7.0 and below Aruba EdgeConnect Enterprise Software versions...

PT-2022-24156 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.2.1.1 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.1.3.1 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.0.7.1 Aruba EdgeConnect Enterprise Softwa...

PT-2022-6264 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 Firmware FW100A53DBR Description: The issue is related to a remote command execution vulnerability via the lan0 dhcps staticlist parameter. This vulnerability can be exploited through a crafted POST request, allowing a remote...

The vulnerability of the SetLocalLink-dns2 component of the Reolink RLC-410W camera’s software allows a intruder to execute arbitrary commands.

The vulnerability of the SetLocalLink-dns2 component of the Reolink RLC-410W video camera software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the SetDdns-domain component in the Reolink RLC-410W camera’s microprogramming system allows a intruder to execute arbitrary commands.

The vulnerability of the SetDdns-domaind component in the Reolink RLC-410W video camera software exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

The vulnerability of the SetDdns-userName component in the Reolink RLC-410W camera’s microprogramming system allows a intruder to execute arbitrary commands.

The vulnerability of the SetDdns-userName component in the Reolink RLC-410W camera’s microprogramming system exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitra...

PT-2022-24153 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions 9.2.1.0 and below Aruba EdgeConnect Enterprise Software versions 9.1.3.0 and below Aruba EdgeConnect Enterprise Software versions 9.0.7.0 and below Aruba EdgeConnect Enterprise Software versions...

PT-2022-26958 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.2.1.1 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.1.3.1 Aruba EdgeConnect Enterprise Software versions prior to ECOS 9.0.7.1 Aruba EdgeConnect Enterprise Softwa...

The vulnerability of the SetDdns-password component in the Reolink RLC-410W camera’s microprogramming system allows a intruder to execute arbitrary commands.

The vulnerability of the SetDdns-password component in the Reolink RLC-410W camera’s microprogramming system exists because measures to neutralize the special elements used in the operating system have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2022-36964 SolarWinds Platform Deserialization of Untrusted Data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-36962 SolarWinds Platform Command Injection

SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands...

CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical flaw impacting Oracle Fusion Middleware to its Known Exploited Vulnerabilities KEV Catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2021-35587, carries a CVSS score of 9.8 a...

The vulnerability of the run_id parameter in the Example Dags function of the Airflow software for data processing tasks allows a attacker to execute arbitrary commands.

The vulnerability of the runid parameter in the Example Dags function of the Airflow software for data processing scenario creation, monitoring, and orchestration is related to incorrect code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary...

D-Link DIR-823G 操作系统命令注入漏洞

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. A security vulnerability exists in D-Link DIR-823G firmware version 1.02B03, which stems from its HNAP API function allowing an attacker to implement arbitrary operating system command execution via a carefully crafted HNAP1...