Command Execution Vulnerability in the pelco Sarix Enhanced GeneralSetupController.php File

pelco Sarix Enhanced is a webcam. A command execution vulnerability exists in the pelco Sarix Enhanced GeneralSetupController.php file. The vulnerability is caused due to the program failing to properly perform validity checks when processing user-submitted data, which allows an attacker...

ROOT Remote Code Execution Vulnerability

ROOT is a data processing system written in C++. The system can query databases in parallel on workstations or clusters of multi-core machines. rootd daemon is one of the daemons. A remote code execution vulnerability exists in the rootd daemon in ROOT 6.9.03 and earlier. An attacker can exploit...

Command Execution Vulnerability in the pelco Sarix Enhanced Dot1xSetupController.php File

pelco Sarix Enhanced is a webcam. A command execution vulnerability exists in the pelco Sarix Enhanced Dot1xSetupController.php file. The vulnerability is caused due to the program failing to properly perform validity checks when processing user-submitted data, allowing an attacker who has been...

Command execution vulnerability in the pelco Sarix Pro network camera set_param program (CNVD-2017-36494)

pelco Sarix Professional is a video camera. A command execution vulnerability exists in the pelco Sarix Pro network camera setparam program. The vulnerability is caused due to the program not performing security checks on user-submitted parameters, allowing an attack to take full control of the...

UBUNTU-CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

Command injection

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

DEBIAN-CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

CVE-2017-16926

Ohcount 3.0.0 is vulnerable to a command injection via filenames containing shell metacharacters, allowing an attacker providing a source tree for processing to execute arbitrary code as the Ohcount user. Affected component: Ohcount 3.0.0; root cause: command injection through specially crafted f...

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...

Cumulus Linux Switch Configuration Tools Backend (clcmd_server) Security Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. Switch Configuration Tools Backend clcmdserver is one of the backend gateway configuration tools. A security vulnerability exists in Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier...

Perl Net::Ping::External extension command injection vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall.Net::Ping::External extension is one of the cross-platform Ping tools. A security vulnerability exists in Perl Net::Ping::External extension version 0.15 and earlier, which is caused by the...

Command injection

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

UBUNTU-CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2017-15924

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the addserver, buildconfig, and constructcommandline functions...

CVE-2017-15924

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the addserver, buildconfig, and constructcommandline functions...

GHSA-RP63-JFMW-532W Mail Gem Improper Input Validation vulnerability

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a 1 sendmail or 2 exim delivery...