CVE-2016-6373

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

CVE-2016-4853

AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Happy Wardrobe...

PT-2016-6180

Name of the Vulnerable Software and Affected Versions AKABEi SOFT2 games affected versions not specified Description The issue allows remote attackers to execute arbitrary OS commands via crafted saved data. This has been demonstrated using Happy Wardrobe, indicating a potential for exploitation ...

CVE-2016-2875

IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors...

PT-2016-5261

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.1.x through 7.2.x before 7.2.7 Description The issue allows remote authenticated users to execute arbitrary OS commands as root. Recommendations For versions 7.1.x through 7.2.x before 7.2.7, update to versi...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

PT-2016-4804

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.x through 6.0.1 Description The issue allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access. This is due to insufficient input validation, which could be...

CVE-2016-1391

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

PT-2016-4758

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Analysis Module NAM versions prior to 6.11 patch.6.1-2-final Cisco Prime Network Analysis Module NAM versions 6.2.x prior to 6.22 Prime Virtual Network Analysis Module vNAM versions prior to 6.11 patch.6.1-2-final Prime...

Input validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

PT-2016-4755

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Analysis Module NAM versions prior to 6.11 patch.6.1-2-final Cisco Prime Network Analysis Module NAM versions 6.2.x prior to 6.21 Prime Virtual Network Analysis Module vNAM versions prior to 6.11 patch.6.1-2-final Prime...

PT-2016-1744

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software versions 1.31b and earlier Description The issue allows remote attackers to execute arbitrary OS commands via a crafted HTTP request. This is due to the system's failure to neutralize special...

CVE-2016-3655

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...

Design/Logic Flaw

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call...

Design/Logic Flaw

The device management command line interface CLI in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter...

CVE-2016-3654

The device management command line interface CLI in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter...

Palo Alto Networks PAN-OS Multiple Vulnerabilities (PAN-SA-2016-0002, PAN-SA-2016-0004)

The Palo Alto Networks PAN-OS running on the remote host is version 5.0.x prior to 5.0.18, 5.1.x prior to 5.1.11, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.10, or 7.0.x prior to 7.0.5-h2. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the GlobalProte...

PT-2016-5082

Name of the Vulnerable Software and Affected Versions Schneider Electric Struxureware Building Operations Automation Server AS versions 1.7 and earlier Schneider Electric Struxureware Building Operations Automation Server AS-P versions 1.7 and earlier Description The issue allows remote...

Palo Alto PAN-OS PAN-SA-2016-0003

Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the...

Unauthenticated Command Injection in Management Web Interface

Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the...