Design/Logic Flaw

remotesupport.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 pid1 or 2 pid2 parameter in a stopremotesupport action...

CVE-2011-4201

CVE-2011-4201 affects Tadasoft Restorepoint 3.2-evaluation: remote_support.cgi in the stop_remote_support action accepts shell metacharacters via pid1 or pid2, enabling an unauthenticated remote attacker to execute commands with www user privileges. Impact can include root access before license a...

CVE-2011-4201

remotesupport.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 pid1 or 2 pid2 parameter in a stopremotesupport action...

CVE-2011-4502

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

Code injection

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

Design/Logic Flaw

recordertest.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability...

GLSA-201110-08 : feh: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-08 feh: Multiple vulnerabilities Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact : A malicious entity might entice a user to visit a URL using the...

feh: Multiple vulnerabilities

Background feh is a fast, lightweight imageviewer using imlib2. Description Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact A malicious entity might entice a user to visit a URL using the --wget-timestamp option, thus...

CVE-2011-3496

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...

Command injection

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...

CVE-2011-3496

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...

CVE-2011-3211

The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...

CVE-2011-3211

The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...

Code injection

The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...

CVE-2011-3211

The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in data received from a client...

CVE-2011-3211

CVE-2011-3211 affects the Bcfg2 server: versions 1.1.2 and earlier, and 1.2 prerelease, are vulnerable to remote command execution via shell metacharacters in data from a client. The root cause is improper handling of client-supplied data on the server side, allowing arbitrary commands to be exec...

CVE-2011-3211

Removed by vendor...

CVE-2011-2899

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...

CVE-2011-2899

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...

Code injection

pysmb.py in system-config-printer 0.6.x and 0.7.x, as used in foomatic-gui and possibly other products, allows remote SMB servers to execute arbitrary commands via shell metacharacters in the 1 NetBIOS or 2 workgroup name, which are not properly handled when searching for network printers...