988 matches found
PT-2020-19802
Name of the Vulnerable Software and Affected Versions KT Slim egg IML500 versions R7283, R8112, R8424 KT Slim egg IML520 versions R8112, R8368, R8411 Description The issue discovered is a command injection, allowing attackers to execute arbitrary OS commands. This affects the wifi device...
CVE-2020-7805: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...
CVE-2020-10789
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
CVE-2020-10789
openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...
CVE-2020-5560
WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors...
Command injection
WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors...
CVE-2020-5556
Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors...
Design/Logic Flaw
Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2020-5556
CVE-2020-5556 affects Shihonkanri Plus GOOUT CGI, specifically versions Ver1.5.8 and Ver2.2.10 . The vulnerability is an OS command injection (CWE-78) that enables a remote attacker to execute arbitrary commands on the affected system via unspecified vectors. The NVD entry assigns a high/critical...
PT-2020-18531
Name of the Vulnerable Software and Affected Versions Shihonkanri Plus GOOUT versions 1.5.8 through 2.2.10 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For versions 1.5.8 through 2.2.10, at the moment, there is no information about a newer versio...
PT-2020-12323
Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3 Description The issue allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php. This is related to a web-base...
PT-2020-12278
Name of the Vulnerable Software and Affected Versions PerlSpeak versions through 2.01 Description The issue allows attackers to execute arbitrary OS commands. This can be demonstrated through the use of system and 2-argument open. Recommendations For PerlSpeak versions through 2.01, consider...
Design/Logic Flaw
BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3...
CVE-2020-10250
BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3...
NewStart CGSL MAIN 4.05 : vim Vulnerability (NS-SA-2020-0020)
The remote NewStart CGSL host, running version MAIN 4.05, has vim packages installed that are affected by a vulnerability: - getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by...
CVE-2020-5535
OpenBlocks IoT VX2 prior to Ver.4.0.0 Ver.3 Series allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors...
PT-2020-18510
Name of the Vulnerable Software and Affected Versions OpenBlocks IoT VX2 versions prior to 4.0.0 Description The issue allows an attacker on the same network segment to execute arbitrary OS commands with root privileges. The exact vectors used for this exploitation are not specified...
CVE-2020-9463
Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the serverip field in JSON data in an api/internal.php?object=centreonconfigurationremote request...
CVE-2020-9463
CVE-2020-9463 affects Centreon 19.10. The vulnerability allows a remote authenticated user to execute arbitrary OS commands via shell metacharacters in the server_ip field of a JSON payload sent to api/internal.php?object=centreon_configuration_remote. Root cause is command injection through impr...