PT-2016-5641

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions 7.0.4 and prior Description The management web...

PT-2016-5640

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.17 and prior Palo Alto Networks PAN-OS versions 5.1.10 and prior Palo Alto Networks PAN-OS versions 6.0.12 and prior Palo Alto Networks PAN-OS versions 6.1.9 and prior Palo Alto Networks PAN-OS versions...

PT-2016-3830

Name of the Vulnerable Software and Affected Versions baserCMS versions 3.0.2 through 3.0.8 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions 3.0.2 through 3.0.8, update to a version outside of this range to resolve the issue...

PT-2016-3861

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access. Recommendations For Symantec Encryption...

Design/Logic Flaw

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leveraging administrator privileges, aka Bug ID CSCux69286...

CVE-2016-1320

CVE-2016-1320 : The Cisco Prime Collaboration CLI on version 9.0 and 11.0 is vulnerable to a local privilege escalation due to insufficient input sanitization, allowing a user with administrator privileges to execute arbitrary OS commands as root. The issue, tracked as Bug ID CSCux69286, affects ...

PT-2016-4707

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration versions 9.0 through 11.0 Description The issue allows local users with administrator privileges to execute arbitrary OS commands as root. This can be achieved by leveraging the CLI in the affected software...

CVE-2016-1141

KDDI HOME SPOT CUBE devices are affected by CVE-2016-1141, an OS command injection vulnerability in the application layer that allows remote authenticated users to execute arbitrary OS commands with the privileges of the affected component. Connected sources (JVNDB-2016-000012, JVN #54686544) des...

PT-2016-4599

Name of the Vulnerable Software and Affected Versions KDDI HOME SPOT CUBE devices version 2 and earlier Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions prior to 2, update to version 2 or later to resolve the issue...

CVE-2016-1141: Improper Neutralization of Special Elements used in an OS Command

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PayPal Java Serialization Vulnerability

A Java serialization vulnerability disclosed more than a year ago figured to have a long shelf life. It lived in popular Java application development frameworks such as Apache Commons Collections—where it’s been patched—and not to mention widely deployed application servers such as Oracle WebLogi...

CVE-2016-1142

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

PT-2016-4600

Name of the Vulnerable Software and Affected Versions acmailer versions prior to 3.8.21 acmailer versions 3.9.x prior to 3.9.15 Beta Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For acmailer versions prior to 3.8.21, update to version...

CVE-2016-1142: Improper Neutralization of Special Elements used in an OS Command

Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2015-7426

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 7.1 before 7.1.3.0 and Tivoli Storage FlashCopy Manager for VMware aka Spectrum Protect Snapshot 4.1 before 4.1.3.0 allo...

Design/Logic Flaw

IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface LMI access...

PT-2016-3656

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.0.0 through 7.0.0 before FP19 IBM Security Access Manager for Web version 8.0 before 8.0.1.3 IF3 IBM Security Access Manager version 9.0 before 9.0.0.0 IF1 Description The issue allows remote...

PT-2016-1112

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware versions 7.1 through 7.1.3.0 Tivoli Storage FlashCopy Manager for VMware versions 4.1 through 4.1.3.0 Description The issue allows remote attackers to execute...

CVE-2015-6380

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622...

PT-2015-3204

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System version 1.11.160 Description The issue allows remote authenticated users to execute arbitrary OS commands via crafted parameters. This is due to the failure to neutralize special elements used in the...