18530 matches found
Veritas Technologies Infoscale Operations Manager 代码问题漏洞
Veritas Technologies Infoscale Operations Manager is a suite of software from Veritas Technologies, Inc. that is used to manage the entire InfoScale deployment. The software provides multi-cluster management, customized interfaces and centralized audit logging. A security vulnerability exists in...
PT-2023-26408 · Veritas · Veritas Infoscale Operations Manager
Name of the Vulnerable Software and Affected Versions: Veritas InfoScale Operations Manager VIOM versions prior to 8.0.0.410 Description: The issue allows an authenticated attacker to upload all types of files to the server, which can then be executed to perform command execution on the remote...
Apache RocketMQ Code Injection Vulnerability
Apache RocketMQ is the United States Apache Apache Foundation of a lightweight data processing platform and messaging engine. Apache RocketMQ suffers from a code injection vulnerability that originates from an extranet leak of the NameServer address and lack of privilege authentication, which can...
CVE-2023-38198
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...
CVE-2023-37567
Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port of the web management page. Affected products and versions are as follows: WRC-1167GHBK3-A...
CVE-2023-37568
CVE-2023-37568 affects ELECOM wireless LAN routers WRC-1167GHBK-S (v1.03 and earlier) and WRC-1167GEBK-S (v1.03 and earlier). The vulnerability is a command injection via the router’s web management page that allows a network-adjacent, authenticated attacker to execute arbitrary commands. Exploit...
CVE-2023-38198
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...
ArubaOS Privilege Escalation Command Injection
The vulnerability of the ArubaOS operating system’s web management interface is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary...
Synology Router Manager Command Execution
The vulnerability of the Synology Router Manager operating system exists because measures to neutralize special elements used in the operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
CVE-2023-38198: Improper Control of Generation of Code
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...
CVE-2023-38198
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...
CVE-2023-38198
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...
RocketMQ NameServer component Code Injection vulnerability
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...
Design/Logic Flaw
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...
CVE-2023-37582 Apache RocketMQ: Possible remote code execution when using the update configuration function
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...
CVE-2023-37582
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...
CVE-2023-37582
The Apache RocketMQ messaging platform contains a Remote Code Execution (RCE) vulnerability in the NameServer component (CVE-2023-37582). This issue stems from an incomplete fix of CVE-2023-33246, where a lack of permission verification and the exposure of NameServer addresses on the extranet all...
PT-2023-4093
Name of the Vulnerable Software and Affected Versions RocketMQ versions prior to 4.9.7 RocketMQ versions prior to 5.1.2 Description The vulnerability in the RocketMQ NameServer component allows for remote command execution. This issue arises when NameServer addresses are exposed on the extranet...
CVE-2023-37582: Improper Control of Generation of Code
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the...
