15767 matches found
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
Giting Command Execution Vulnerability
Giting is a Git version control system server. A security vulnerability exists in Giting versions prior to 0.0.8, which is caused by the program executing the 'repo' parameter of the 'pull' function without performing arbitrary validation. The vulnerability can be exploited to execute arbitrary...
CVE-2018-19798
Fleetco Fleet Maintenance Management FMM 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidentsadd.php?submit=1 URI, as demonstrated by the valueImages1 field, which leads to remote command execution on the remote server. Any authenticat...
Command injection
Fleetco Fleet Maintenance Management FMM 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidentsadd.php?submit=1 URI, as demonstrated by the valueImages1 field, which leads to remote command execution on the remote server. Any authenticat...
CVE-2018-19798
Fleetco Fleet Maintenance Management FMM 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidentsadd.php?submit=1 URI, as demonstrated by the valueImages1 field, which leads to remote command execution on the remote server. Any authenticat...
CVE-2018-19798
The CVE-2018-19798 entry applies to Fleetco Fleet Maintenance Management (FMM) ≤1.2. An authenticated user can upload an arbitrary .php file (via accidents_add.php?submit=1, value_Images_1) with Content-Type application/x-php, leading to remote command execution on the remote server. The availabl...
CVE-2019-20488
An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface setup.cgi are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter...
PT-2020-3306 · Fasterxml +7 · Jackson-Databind +7
Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.9.10.4 jackson-databind versions 2.7.9.7 and earlier jackson-databind versions 2.8.11.6 and earlier debian debian linux, fasterxml jackson-databind, netapp active iq unified manager, oracle autov...
CVE-2020-9463
Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the serverip field in JSON data in an api/internal.php?object=centreonconfigurationremote request...
CVE-2020-9463
Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the serverip field in JSON data in an api/internal.php?object=centreonconfigurationremote request...
New OpenSMTPD RCE Flaw Affects Linux and OpenBSD Email Servers
OpenSMTPD has been found vulnerable to yet another critical vulnerability that could allow remote attackers to take complete control over email servers running BSD or Linux operating systems. OpenSMTPD , also known as OpenBSD SMTP Server, is an open-source implementation of the Simple Mail Transf...
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
Design/Logic Flaw
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
CVE-2020-9374
CVE-2020-9374 affects TP-Link TL-WR849N device with firmware version 0.9.1 4.16. The vulnerability is a remote command execution in the diagnostics area triggered by sending shell metacharacters to the panel’s traceroute feature, indicating a command-injection flaw in the diagnostics path. Exploi...
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
Iteris Vantage Velocity Field Unit Undocumented Account Vulnerability
The Iteris Vantage Velocity Field Unit is a road monitoring field unit from Iteris. The Iteris Vantage Velocity Field Unit has two undocumented accounts, "eclipse/bluetooth", which can be exploited by a remote attacker to submit a special request to execute arbitrary OS commands with ROOT...
Cacti Arbitrary OS Command Execution Vulnerability (CNVD-2020-13156)
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A security vulnerability exists in the graphrealtime.php file in...