CVE-2017-10811: Improper Neutralization of Special Elements used in an OS Command

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors...

PT-2017-9395

Name of the Vulnerable Software and Affected Versions GigaCC OFFICE versions 2.3 and earlier Description The issue allows remote attackers to execute arbitrary OS commands via specially crafted mail templates. Recommendations For GigaCC OFFICE versions 2.3 and earlier, update to a version later...

CVE-2017-2281: Improper Neutralization of Special Elements used in an OS Command

WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

cgitest.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" ampersand in the writemac writepid, writemsn, writetan, or writehdv parameter...

Design/Logic Flaw

snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FWAIC1620W1.1.0-1220120709r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter...

PT-2017-6564

Name of the Vulnerable Software and Affected Versions AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera version FW AIC1620W 1.1.0-12 20120709 r1192.pck Description The issue allows remote authenticated users to execute arbitrary OS commands. This is achieved by injecting shell...

Design/Logic Flaw

Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CVE-2017-2183

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings...

CVE-2017-2185

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI...

PT-2017-15242

Name of the Vulnerable Software and Affected Versions HOME SPOT CUBE2 firmware versions V101 and earlier Description The issue allows authenticated attackers to execute arbitrary OS commands via Clock Settings. Recommendations For HOME SPOT CUBE2 firmware versions V101 and earlier, update to a...

Design/Logic Flaw

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7819

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7806

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2016-7806

CVE-2016-7806 affects I-O DATA DEVICE WFS-SR01 firmware

CVE-2016-7819

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

PT-2017-9357

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE WFS-SR01 version 1.10 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For I-O DATA DEVICE WFS-SR01 version 1.10 and earlier, update to a version later than 1.10 to...

PT-2017-9370

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE TS-WRLP versions 1.01.02 and earlier I-O DATA DEVICE TS-WRLA versions 1.01.02 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary OS commands. Recommendations For I-O DATA DEVICE...

CVE-2016-7819: Improper Neutralization of Special Elements used in an OS Command

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: I, Librarian PDF manager vulnerable version: =4.6 & 4.7 fixed version: 4.8 CVE number: - impact: Critical homepage:...