979 matches found
CVE-2018-20323
www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands...
CVE-2019-5414
If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port 1.3.2...
CVE-2019-3704
The CVE-2019-3704 entry describes an OS command injection vulnerability in Dell EMC VNX2 OE for File, affecting the VNX Control Station prior to 8.1.9.236. The issue arises from inadequate restriction in sudores, allowing a local authenticated attacker to execute arbitrary OS commands as root. Th...
PT-2019-1516
Name of the Vulnerable Software and Affected Versions D-Link DIR-823G versions through 1.02B03 Description The issue exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of this issue may allow a remote attacker to execute arbitrary...
CVE-2018-6444
A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute arbitrary OS Commands...
PT-2019-11023
Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.1.0 Description: A remote unauthenticated attacker could exploit this issue to execute arbitrary code or arbitrary OS commands. Recommendations: For versions prior to 14.1.0, update to version 14.1...
Denial Of Service (DoS)
libsystemd.so is vulnerable to denial of service. A lack of memory boundary checks causes the stack to clash with another memory region, allowing a remote attacker to abuse the vulnerability to crash the process, or possibly execute arbitrary OS commands with journald privileges...
Amazon Linux AMI : php56 / php70,php71,php72 (ALAS-2019-1147)
ext/imap/phpimap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty string in the message argument to the imapmail function.CVE-2018-19935 University of Washington IMAP Toolkit 2007f on UNIX, as used i...
CVE-2018-16200
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands...
CVE-2018-16167
LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
Hardcoded credentials
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands...
Design/Logic Flaw
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...
CVE-2018-0627
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...
Design/Logic Flaw
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via targetAPSsid parameter...
Design/Logic Flaw
Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0625
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via formSysCmd parameter...
CVE-2018-0626
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via sysCmd in formWsc parameter...
CVE-2018-0628
Aterm WG1200HP firmware Ver1.0.31 and earlier allows attacker with administrator rights to execute arbitrary OS commands via HTTP request and response...