CVE-2021-23732

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system...

PT-2021-15548

Name of the Vulnerable Software and Affected Versions docker-cli-js versions all Description The issue affects the Docker.command method in the docker-cli-js package. If a user can partially control the command parameter of this method, they can execute arbitrary OS commands on the host system...

CVE-2021-23732: Improper Neutralization of Special Elements used in an OS Command

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system...

PT-2021-14281

Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.5002 and earlier Movable Type versions 6.8.2 and earlier Movable Type Advanced versions 7 r.5002 and earlier Movable Type Advanced versions 6.8.2 and earlier Movable Type Premium version 1.46 and earlier Movable Type...

CVE-2021-20837: Improper Neutralization of Special Elements used in an OS Command

Movable Type 7 r.5002 and earlier Movable Type 7 Series, Movable Type 6.8.2 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.5002 and earlier Movable Type Advanced 7 Series, Movable Type Advanced 6.8.2 and earlier Movable Type Advanced 6 Series, Movable Type Premium 1.46 and earlier,...

Aruba Instant Command Injection Vulnerability (CNVD-2021-89450)

Aruba Instant is a wireless network. Providing the only Wi-Fi solution that is easy to set up, Aruba Instant is vulnerable to a command injection vulnerability, which is caused by incorrect input validation in the web interface. An attacker could exploit the vulnerability to send a carefully...

CVE-2021-41315

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...

PT-2021-23270

Name of the Vulnerable Software and Affected Versions Device42 Remote Collector versions prior to 17.05.01 Description The issue allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges due to the lack of user input...

ROS-2-1447

2.1447 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

ROS-2-1255

2.1255 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

GHSA-2Q95-593F-G7H7 OS Command Injection in Centreon

/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabasepath parameter...

D-Link DSL-2750U OS Command Injection Vulnerability

The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router. an OS command injection vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could exploit this vulnerability in combination with other vulnerabilities to execute arbitrary OS commands...

PT-2021-14629

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 3.6.1 Description The issue concerns an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially exploit this...

CVE-2021-21585: Improper Neutralization of Special Elements used in an OS Command

Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially exploit this vulnerability to execute arbitrary OS commands...

PT-2021-11681

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerStore versions prior to 1.0.3.0.5.006 Description: The issue is related to an OS Command Injection vulnerability in the PowerStore X environment. A locally authenticated attacker could potentially exploit this vulnerability,...

CVE-2021-20740

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08NEC2.5.4a and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08NEC3.4.2 allow remote authenticated attackers to execute arbitrary...

PT-2021-14196

Name of the Vulnerable Software and Affected Versions: Hitachi Virtual File Platform versions prior to 5.5.3-09 Hitachi Virtual File Platform versions prior to 6.4.3-09 NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08NEC2.5.4a NEC Storage M Series NAS Gateway Nh4b/Nh8b,...

PT-2021-14200

Name of the Vulnerable Software and Affected Versions: Inkdrop versions prior to v5.3.1 Description: The issue allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop. Recommendations: For versions...

CVE-2021-20745: Improper Neutralization of Special Elements used in an OS Command

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop...

SUSE SLES11 Security Update : vim (SUSE-SU-2020:14385-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14385-1 advisory. - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g., Python, Ruby,...