14283 matches found
SUSE CVE-2023-22643
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...
PT-2023-6472 · Cisco · Cisco Secure Email/Web Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Email Gateway ESA and Cisco Secure Email and Web Manager SMA affected versions not specified Description: A vulnerability in the Web UI and administrative CLI of the affected systems could allow an authenticated remote or local...
Git 路径遍历漏洞
Git is a free, open source distributed version control system. Git has a security vulnerability. An attacker could use this vulnerability to access files and directories stored outside of the web root folder. The following versions are affected: version 2.39 up to and including version 2.39.2,...
PT-2023-2007 · Wago · Wago Cc100 +3
Name of the Vulnerable Software and Affected Versions: WAGO PFC100/PFC200 versions affected versions not specified WAGO CC100 versions affected versions not specified WAGO Edge Controller versions affected versions not specified WAGO Touch Panel 600 versions affected versions not specified...
CVE-2023-20076
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an...
CVE-2023-20076
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an...
CVE-2023-20076
CVE-2023-20076 affects Cisco IOx Application Hosting Environment. The flaw arises from incomplete sanitization of parameters in an activation payload, allowing an authenticated, remote attacker to execute arbitrary commands as root on the underlying host OS. The issue is exploitable by deploying/...
CVE-2023-20076 Cisco IOx Application Hosting Environment Command Injection Vulnerability
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an...
CVE-2023-20076 Cisco IOx Application Hosting Environment Command Injection Vulnerability
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an...
CVE-2023-0127
A command injection vulnerability in the firmwareupdate command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root...
Command injection
A command injection vulnerability in the firmwareupdate command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root...
CVE-2022-34450
PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted control/code execution on the system as root...
CVE-2022-34447
PowerPath Management Appliance with versions 3.3 & 3.2, 3.1 & 3.0 contains OS Command Injection vulnerability. An authenticated remote attacker with administrative privileges could potentially exploit the issue and execute commands on the system as the root user...
CVE-2023-0127
A command injection vulnerability in the firmwareupdate command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root...
D-Link DWL-2600AP 命令注入漏洞
D-Link DWL-2600AP is a wireless access point device from D-Link, a Chinese company. The D-Link DWL-2600AP is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands as root...
CVE-2023-0127
Affected product: D-Link DWL-2600AP (wireless access point). Vulnerability: Command injection in the firmware_update command exposed via the device’s restricted telnet interface. Root cause: improper handling in firmware_update allows an authenticated user to inject and execute arbitrary commands...
PT-2023-16030 · D Link · Dwl-2600Ap Firmware
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A command injection vulnerability in the firmware update command, located in the device's restricted telnet interface, allows an authenticated attacker ...
CVE-2022-34450
The CVE-2022-34450 entry concerns Dell PowerPath Management Appliance version 3.3, where an authenticated admin can escalate privileges to root. The vulnerability is described as an elevation of privilege allowing unrestricted code execution on the system. Public sources in the provided set ident...