Lucene search
K

1764 matches found

Citrix
Citrix
added 2023/09/04 12:0 a.m.11 views

How to auto execute shell command at a regular time every day using crontab

This article outlines the method to schedule a shell command at a regular time every day using crontab in an ADC...

7.2AI score
Exploits0
NVD
NVD
added 2023/08/09 6:15 p.m.9 views

CVE-2022-48584

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS9AI score0.00461EPSS
Exploits0References1
OSV
OSV
added 2023/08/09 6:15 p.m.0 views

CVE-2022-48582

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS5.9AI score0.00461EPSS
Exploits0References1
OSV
OSV
added 2023/08/09 6:15 p.m.1 views

CVE-2022-48584

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS5.9AI score0.00461EPSS
Exploits0References1
NVD
NVD
added 2023/08/09 6:15 p.m.19 views

CVE-2022-48581

A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS9AI score0.00461EPSS
Exploits0References1
Prion
Prion
added 2023/08/09 6:15 p.m.10 views

Command injection

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

6.5CVSS8.9AI score0.00461EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/08/09 6:15 p.m.14 views

Command injection

A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

6.5CVSS8.9AI score0.00461EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/09 5:29 p.m.10 views

CVE-2022-48584

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS9.1AI score0.00461EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/09 5:13 p.m.14 views

CVE-2022-48583

A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS9.1AI score0.00461EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/09 5:11 p.m.18 views

CVE-2022-48582

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS9.1AI score0.00461EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/09 5:8 p.m.20 views

CVE-2022-48581

A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS9.1AI score0.00461EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/09 5:8 p.m.12 views

CVE-2022-48581

A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS7.7AI score0.00461EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/09 5:2 p.m.13 views

CVE-2022-48580

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS7.6AI score0.00461EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2023/08/09 2:41 p.m.19 views

ScanCode.io command injection in docker image fetch process

Command Injection in docker fetch process Summary A possible command injection in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. Details In the function scanpipe/pipes/fetch.py:fetchdockerimage1 the parameter dockerreference is user...

8.8CVSS8AI score0.01643EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.1 views

PT-2023-15852 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A command injection issue exists in the ARP ping device tool feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a shell...

8.8CVSS8.9AI score0.00461EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.1 views

PT-2023-15853 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A command injection issue exists in the "dash export" feature, where unsanitized user-controlled input is passed directly to a shell command, allowing the injection of arbitrary...

8.8CVSS9AI score0.00461EPSS
Exploits0References3
NVD
NVD
added 2023/08/07 9:15 p.m.10 views

CVE-2023-39523

ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. In the...

8.8CVSS7.5AI score0.01643EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/08/07 8:55 p.m.13 views

CVE-2023-39523 ScanCode.io command injection in docker image fetch process

ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. In the...

6.8CVSS8.9AI score0.01643EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/08/07 12:0 a.m.3 views

PT-2023-4304 · Docker · Docker

Name of the Vulnerable Software and Affected Versions: ScanCode.io versions prior to 32.5.1 Description: The issue is related to a command injection vulnerability in the docker fetch process. This vulnerability allows malicious commands to be appended to the docker reference parameter. The docker...

8.8CVSS8.9AI score0.01643EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2023/07/28 12:0 a.m.28 views

EulerOS Virtualization 2.10.0 : emacs (EulerOS-SA-2023-2486)

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because...

9.8CVSS7.8AI score0.00447EPSS
Exploits0References5
Rows per page
Query Builder