CVE-2022-23118

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line git at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller...

CVE-2022-23118: Exposure of Resource to Wrong Sphere

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line git at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller...

Debian DLA-2866-1 : uw-imap - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2866 advisory. - University of Washington IMAP Toolkit 2007f on UNIX, as used in imapopen in PHP and other products, launches an rsh command by means of the imaprimap function in...

CVE-2021-35032

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call...

CVE-2021-35031

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device...

CVE-2021-35032

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call...

PT-2021-6107

Name of the Vulnerable Software and Affected Versions Zyxel GS1900 series firmware affected versions not specified Zyxel XGS1210 series firmware affected versions not specified Zyxel XGS1250 series firmware affected versions not specified Description A vulnerability in the TFTP client of the...

CVE-2021-35032: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call...

PT-2021-6108

Name of the Vulnerable Software and Affected Versions Zyxel GS1900 series firmware version 2.60 Description A vulnerability in the 'libsal.so' file of the Zyxel GS1900 series firmware could allow an authenticated local user to execute arbitrary OS commands via a crafted function call. The issue i...

PT-2021-23991

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue allows an attacker to inject arbitrary operating system commands through a specific parameter in the email sending feature. Recommendations: For versions 8.20.0 and prior, conside...

CVE-2021-20854

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20854

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20864

Improper access control vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2021-20854

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

PT-2021-14295

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.02.9 and prior Description: A buffer overflow issue allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors. Recommendations: For versions 1.02.9...

PT-2021-14296

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers WRH-733GBK versions 1.02.9 and prior ELECOM LAN routers WRH-733GWH versions 1.02.9 and prior Description: The issue allows a network-adjacent attacker with administrator privilege to execute arbitrary OS commands via...

PT-2021-14297

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior ELECOM LAN routers WRH-733GWH firmware v1.02.9 and prior Description: The issue allows a network-adjacent attacker with administrator privilege to execute arbitrary OS commands via...

PT-2021-14307

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GST2 firmware versions 1.25 and prior ELECOM WRC-1167GST2A firmware versions 1.25 and prior ELECOM WRC-1167GST2H firmware versions 1.25 and prior ELECOM WRC-2533GS2-B firmware versions 1.52 and prior ELECOM WRC-2533GS2-W firmwa...

PT-2021-6620

Name of the Vulnerable Software and Affected Versions Zyxel ARMOR Z1/Z2 firmware affected versions not specified Description A command injection issue in the CGI program of the firmware could allow an attacker to execute arbitrary OS commands via a LAN interface. This is due to the lack of measur...

PT-2021-21215

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions 7.1 and all prior versions Description The issue allows a remote high privileged attacker to potentially exploit an OS command injection vulnerability, leading to the execution of arbitrary OS commands on the...