OS Command Injection in microweber/microweber

Description OS command injection also known as shell injection is a web security vulnerability that allows an attacker to execute arbitrary operating system OS commands on the server that is running an application, and typically fully compromise the application and all its data. Very often, an...

PT-2022-12009 · Acronis · Acronis Cyber Protect Home Office +4

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 Windows versions before build 28035 Acronis Agent Windows versions before build 27147 Acronis Cyber Protect Home Office Windows versions before build 39612 Acronis True Image 2021 Windows versions before build 39287...

Design/Logic Flaw

SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system...

Mageia: Security Advisory (MGASA-2020-0429)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KING JIM Label printer 访问控制错误漏洞

KING JIM Label printer is a label printer from KING JIM Japan. An access control error vulnerability exists in the KING JIM Label printer, which stems from the product not adding adequate protection for credentials. An attacker could use this vulnerability to obtain credentials, connect to a Wi-F...

NVIDIA SHIELD TV 权限许可和访问控制问题漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. The NVIDIA SHIELD TV suffers from a privilege license and access control issue vulnerability that stems from a failure to restrict AHB-DMA access in the BROM, distributed with the Android image of the NVIDIA-supplied T21...

ROS-2-2047

2.2047 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability allows a malicious actor to execute arbitrary code remotely and completely compromise the vulnerable system by using specially crafted requests...

Unspecified Vulnerability in AMD Graphics Driver (CNVD-2021-100382)

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to compromise a system by an unprivileged user...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to improper code generation management, allows attackers to execute arbitrary code and cause the system to be completely compromised.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code, leading to a complete compromise of the system...

CVE-2021-36313

Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

Input validation

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the system...

CVE-2020-12963

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows may allow unprivileged users to compromise the system...

CVE-2020-12963

CVE-2020-12963 is an insufficent pointer validation vulnerability in the AMD Graphics Driver for Windows 10. It affects AMD Graphics Driver for Windows 10; unprivileged users could compromise the system. Mitigations: update to AMD Radeon Software / Enterprise Driver versions 20.11.2+ (and 21.Q1 E...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to compromise a system by an unprivileged user...

Critical Linux Kernel Bug Allows Remote Takeover

A critical heap-overflow security vulnerability in the Transparent Inter Process Communication TIPC module of the Linux kernel could allow local exploitation and remote code execution, leading to full system compromise. TIPC is a peer-to-peer protocol used by nodes within a Linux cluster to...

NewStart CGSL CORE 5.05 / MAIN 5.05 : librepo Vulnerability (NS-SA-2021-0170)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has librepo packages installed that are affected by a vulnerability: - A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository...

New Linux kernel memory corruption bug causes full system compromise

By Waqas Researchers dubbed it a "straightforward Linux kernel locking bug" that they exploited against Debian Buster's 4.19.0.13-amd64 kernel. This is a post from HackRead.com Read the original post: New Linux kernel memory corruption bug causes full system compromise...

HPE Aruba ClearPass Policy Manager Remote Directory Traversal Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control NAC solution. A directory traversal vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit the vulnerability to execute arbitrary commands on the server as root user, which could result in complete system...

Aruba ClearPass Policy Manager 路径遍历漏洞

HPE Aruba ClearPass Policy Manager is a network access control NAC solution. A directory traversal vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit the vulnerability to execute arbitrary commands on the server as root user, which could result in complete system...