PT-2017-15216

Name of the Vulnerable Software and Affected Versions WNC01WH firmware versions 1.0.0.9 and earlier Description The issue allows authenticated attackers to execute arbitrary OS commands. Recommendations For WNC01WH firmware versions 1.0.0.9 and earlier, update to a version later than 1.0.0.9 to...

PT-2017-15180

Name of the Vulnerable Software and Affected Versions TS-WPTCAM versions 1.18 and earlier TS-WPTCAM2 version 1.00 TS-WLCE versions 1.18 and earlier TS-WLC2 versions 1.18 and earlier TS-WRLC versions 1.17 and earlier TS-PTCAM versions 1.18 and earlier TS-PTCAM/POE versions 1.18 and earlier...

CVE-2017-2152: Improper Neutralization of Special Elements used in an OS Command

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

PT-2017-8707

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.5 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue...

PT-2017-3054

Name of the Vulnerable Software and Affected Versions WN-G300R3 firmware versions 1.03 and earlier Description The issue is caused by a buffer overflow in the firmware, which can be exploited by a remote attacker to execute arbitrary OS commands. Recommendations For WN-G300R3 firmware versions 1....

CVE-2016-8363: Undefined Security Weakness

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

CVE-2016-0325

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert...

PT-2016-4148

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 3.0.1.6 through 6.0 before 6.0.2 iFix5 Rational Quality Manager versions 3.0.1.6 through 6.0 before 6.0.2 iFix5 Rational Team Concert versions 3.0.1.6 through 6.0 before 6.0.2 iFix5...

Design/Logic Flaw

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

CVE-2016-0326

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

PT-2016-4149

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management versions 3.0.1.6 before iFix8 IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management versions 4.x before 4.0.7 iFix11 IBM Rational Quali...

Symantec Web Gateway OS Command Injection Vulnerability

Symantec Web Gateway is prone to a OS command injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-6428

Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349...

CVE-2016-6428: Undefined Security Weakness

Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349...

CVE-2016-6137

SAP TREX 7.10 Revision 63 is affected by CVE-2016-6137, a remote command execution vulnerability stemming from an unspecified function that enables arbitrary OS command execution via unknown vectors (aka SAP Security Note 2203591). The public documents do not reveal the exact vulnerable component...

Design/Logic Flaw

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...