5702 matches found
CVE-2013-4983
The getreferers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php...
Design/Logic Flaw
The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...
CVE-2013-4984
The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...
CVE-2013-4983
CVE-2013-4983 affects Sophos Web Protection Appliance via the sblistpack component (get_referers) in /opt/ws/bin/sblistpack. Versions affected: pre-3.7.9.1 and pre-3.8.1.1 (i.e., 3.7.9.1 and 3.8.1.1 patched). The vulnerability allows remote command execution by injecting shell metacharacters into...
CVE-2013-4984: Improper Neutralization of Special Elements used in an OS Command
The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...
PT-2013-5315
Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.9.1 Sophos Web Appliance version 3.8 before 3.8.1.1 Description The issue allows local users to gain privileges via shell metacharacters in the second argument passed to the close connections function...
Design/Logic Flaw
The web interface in the Intelligent Platform Management Interface IPMI implementation on Supermicro H8DC, H8DG, H8SCM-F, H8SGL-F, H8SM, X7SP, X8DT, X8SI, X9DAX-, X9DB, X9DR, X9QR, X9SBAA-F, X9SC, X9SPU-F, and X9SR devices allows remote authenticated users to execute arbitrary commands via shell...
CVE-2013-3608
The web interface in the Intelligent Platform Management Interface IPMI implementation on Supermicro H8DC, H8DG, H8SCM-F, H8SGL-F, H8SM, X7SP, X8DT, X8SI, X9DAX-, X9DB, X9DR, X9QR, X9SBAA-F, X9SC, X9SPU-F, and X9SR devices allows remote authenticated users to execute arbitrary commands via shell...
PT-2013-4513
Name of the Vulnerable Software and Affected Versions Supermicro IPMI implementation versions affected versions not specified Description The issue affects the web interface in the Intelligent Platform Management Interface IPMI implementation, allowing remote authenticated users to execute...
CVE-2013-3608: Improper Input Validation
The web interface in the Intelligent Platform Management Interface IPMI implementation on Supermicro H8DC, H8DG, H8SCM-F, H8SGL-F, H8SM, X7SP, X8DT, X8SI, X9DAX-, X9DB, X9DR, X9QR, X9SBAA-F, X9SC, X9SPU-F, and X9SR devices allows remote authenticated users to execute arbitrary commands via shell...
CVE-2013-5647
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2013-5647
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
Code injection
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2013-5647
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2013-5647
CVE-2013-5647 affects the Ruby gem Sounder (library: lib/sounder/sound.rb) version 1.0.1. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, indicating a remote command execution flaw in file-name handling. Several sources (NVD, Red Hat...
CVE-2013-5647
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
PT-2013-5709
Name of the Vulnerable Software and Affected Versions sounder gem version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, specifically in the lib/sounder/sound.rb file. Recommendations For sounder gem version 1.0.1, conside...
CVE-2013-5647: Improper Control of Generation of Code
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
