CVE-2025-32002

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitra...

CVE-2024-24780

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI. This issue affects Apache IoTDB: from 1.0.0 before 1.3.4. Users are recommended to upgrade to version 1.3.4, which fixes...

The vulnerability of the sub_41710C function (/goform/diag_nslookup) in the D-Link DIR-823X AX3000 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the sub41710C function /goform/diagnslookup in the D-Link DIR-823X AX3000 router’s microprogramming system exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Alibaba Cloud Linux 3 : 0126: vim (ALINUX3-SA-2022:0126)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0126 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-1621: Heap buffer overflow in...

EUVD-2025-14705

A stack-based buffer overflow vulnerability CWE-121 in Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, 6.4.0 through 6.4.10, FortiRecorder versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.5, 6.4.0 through 6.4.5, FortiMail versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through...

Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-33025

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.5, RUGGEDCOM ROX MX5000RE All versions V2.16.5, RUGGEDCOM ROX RX1400 All versions V2.16.5, RUGGEDCOM ROX RX1500 All versions V2.16.5, RUGGEDCOM ROX RX1501 All versions V2.16.5, RUGGEDCOM ROX RX1510 All versions V2.16.5...

The vulnerability of the nvJPEG2000 library in NVIDIA GPU graphics software allows a perpetrator to execute arbitrary code and rewrite data in the memory buffer.

The vulnerability of the nvJPEG2000 library in NVIDIA GPU graphics software relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and rewrite data in the memory buffer...

EulerOS 2.0 SP10 : emacs (EulerOS-SA-2025-1507)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands o...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

Cisco IOS XE 操作系统命令注入漏洞

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the Cisco IOS XE Software web interface, which can be exploited by a remote attacker to submit a special request that can execute arbitrary command...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

CVE-2025-22476

Dell Storage Center (Dell Storage Manager) 20.1.20 is affected by a Command Injection vulnerability (Improper Neutralization of Special Elements in commands). A low-privileged attacker with adjacent network access could potentially achieve remote code execution. The PT-2025-19884 document confirm...

CVE-2025-3020

An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact...

CVE-2025-3020

IBM Maximo Application Suite - IoT Component is listed as affected by CVE-2025-3020. Affected versions: 9.1, 9.0, 8.8, 8.7. Remediations in the IBM bulletin: upgrade to 9.1.4, 9.0.13, 8.8.23, or 8.7.27. The bulletin groups CVE-2025-3020 with other CVEs and provides high-level remediation guidance...

EulerOS 2.0 SP12 : emacs (EulerOS-SA-2025-1414)

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands o...