4051 matches found
Adtran 834-5 操作系统命令注入漏洞
The Adtran 834-5 is a Gigabit Ethernet gateway from Adtran USA. An operating system command injection vulnerability exists in the Adtran 834-5 version 11.1.0.101-202106231430, which stems from the device allowing OS commands to be injected into the Ping or Traceroute utility via shell...
CVE-2024-31977
Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility...
CVE-2024-31977
CVE-2024-31977 affects Adtran 834-5 devices (firmware 11.1.0.101-202106231430) with a root cause in the Ping/Traceroute utilities where shell metacharacters allow OS command injection. The vulnerability is addressed by SmartOS version 12.6.3.1 or later; SMARTOS fixes have been backported to the 1...
AlmaLinux 8 : less (ALSA-2024:4256)
The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:4256 advisory. less: OS command injection CVE-2024-32487 less: missing quoting of shell metacharacters in LESSCLOSE handling CVE-2022-48624 Tenable has extracted the...
Important: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: OS command injection...
ALSA-2024:4256 Important: less security update
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fixes: less: OS command injection...
RHEL 8 : less (RHSA-2024:4256)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4256 advisory. The less utility is a text file browser that resembles more, but allows users to move backwards in the file as well as forwards. Since less...
VulnCheck KEV: CVE-2019-20504
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...
CVE-2014-5470
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation...
GNU Global Code Execution Vulnerability
GNU Global is a free code tagging system for the US GNU community. A code execution vulnerability exists in GNU Global that stems from the use of shell metacharacters, no details of the vulnerability are provided at this time...
CVE-2014-5470
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation...
CVE-2014-5470
CVE-2014-5470 affects Actual Analyzer (versions prior to 2014-08-29). The vulnerability arises from untrusted input being passed to an eval operation, enabling code execution via shell metacharacters in the input data. Connected sources show concrete details: the flaw exists in Actual Analyzer’s ...
Actual Analyzer Security Vulnerability
Actual Analyzer is a PHP tool for monitoring website traffic from Actual Analyzer, Inc. A security vulnerability exists in Actual Analyzer that stems from the use of untrusted input for some of the input data passed to the eval operation, which allows code execution via shell metacharacters...
CVE-2014-5470
Actual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation...
PT-2024-10557 · Unknown · Actual Analyzer
Name of the Vulnerable Software and Affected Versions: Actual Analyzer versions prior to 2014-08-29 Description: The issue allows code execution via shell metacharacters because untrusted input is used for part of the input data passed to an eval operation. Recommendations: For versions prior to...
Advisory ROSA-SA-2024-2433
software: emacs 28.1 WASP: ROSA-CHROME packageevrstring: emacs-28.1-5 CVE-ID: CVE-2022-48339 BDU-ID: None CVE-Crit: N/A CVE-DESC.: A problem was discovered in GNU Emacs. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and srcdir paramet...
DEBIAN-CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
CVE-2024-38448
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath aka -d is untrusted, because shell metacharacters may be used...
