5702 matches found
CVE-2011-5010
The Ctek SkyRouter 4200 and 4300 series routers are vulnerable to a remote arbitrary command execution flaw in the apps/a3/cfg_ethping.cgi component. The root cause is a failure to adequately sanitize user-supplied input, specifically allowing shell metacharacters in the PINGADDRESS parameter dur...
PT-2011-5165
Name of the Vulnerable Software and Affected Versions Ctek SkyRouter versions 4200 and 4300 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action in the apps/a3/cfg ethping.cgi endpoint. Recommendations F...
CVE-2011-5010: Undefined Security Weakness
apps/a3/cfgethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action...
CVE-2011-4201
remotesupport.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 pid1 or 2 pid2 parameter in a stopremotesupport action...
Design/Logic Flaw
remotesupport.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 pid1 or 2 pid2 parameter in a stopremotesupport action...
CVE-2011-4201
remotesupport.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 pid1 or 2 pid2 parameter in a stopremotesupport action...
CVE-2011-4201
CVE-2011-4201 affects Tadasoft Restorepoint 3.2-evaluation: remote_support.cgi in the stop_remote_support action accepts shell metacharacters via pid1 or pid2, enabling an unauthenticated remote attacker to execute commands with www user privileges. Impact can include root access before license a...
PT-2011-4881
Name of the Vulnerable Software and Affected Versions Tadasoft Restorepoint version 3.2 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the pid1 or pid2 parameter in a stop remote support action. This is related to the remote support.cgi...
CVE-2011-4201: Improper Control of Generation of Code
remotesupport.cgi in the Tadasoft Restorepoint 3.2 evaluation image allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 pid1 or 2 pid2 parameter in a stopremotesupport action...
CVE-2011-4502
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
Code injection
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
PT-2011-4966
Name of the Vulnerable Software and Affected Versions Edimax BR-6104K versions prior to 3.25 Edimax 6114Wg version not specified Canyon-Tech CN-WF512 version 1.83 Canyon-Tech CN-WF514 version 2.08 Sitecom WL-153 versions prior to 1.39 Sweex LB000021 version 3.15 Description The issue allows remot...
Design/Logic Flaw
recordertest.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability...
PT-2011-1899
Name of the Vulnerable Software and Affected Versions D-Link DCS-2121 camera version 1.04 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a semicolon injection. This occurs in the recorder test.cgi file...
CVE-2010-4964: Improper Control of Generation of Code
recordertest.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability...
GLSA-201110-08 : feh: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201110-08 feh: Multiple vulnerabilities Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact : A malicious entity might entice a user to visit a URL using the...
feh: Multiple vulnerabilities
Background feh is a fast, lightweight imageviewer using imlib2. Description Multiple vulnerabilities have been discovered in feh. Please review the CVE identifiers referenced below for details. Impact A malicious entity might entice a user to visit a URL using the --wget-timestamp option, thus...
CVE-2011-3496
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...