8146 matches found
TIBCO Data Virtualization Command Injection Vulnerability
TIBCO Data Virtualization formerly known as Cisco Information Server is the United States TIBCO Software, Inc. of a data virtualization suite Cisco Data Virtualization Suite is the basis of the Java-based information server. version version control adapters is one of the version control adapters....
CVE-2018-5428
The version control adapters component of TIBCO Data Virtualization formerly known as Cisco Information Server contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6...
CVE-2018-5428
The version control adapters component of TIBCO Data Virtualization formerly known as Cisco Information Server contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6...
Input validation
The version control adapters component of TIBCO Data Virtualization formerly known as Cisco Information Server contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6...
CVE-2018-5428
The CVE-2018-5428 issue affects the version control adapters component of TIBCO Data Virtualization (formerly Cisco Information Server). The vulnerability allows arbitrary command execution in releases 7.0.5 and 7.0.6 due to the underlying flaw in the adapters. CVSSv3 base score is 8.8 (HIGH) wit...
CVE-2018-5428 TIBCO Data Virtualization Command Injection Vulnerability
The version control adapters component of TIBCO Data Virtualization formerly known as Cisco Information Server contains vulnerabilities that may allow for arbitrary command execution. Affected releases are TIBCO Data Virtualization: 7.0.5; 7.0.6...
Cisco NX-OS Software Role-Based Access Arbitrary Command Execution Vulnerability
A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file...
CVE-2018-9023
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the updatecrld script...
CVE-2018-9023
CA Privileged Access Manager 2.x contains an input validation vulnerability that allows unprivileged users to execute arbitrary commands by passing specially crafted parameters to the update_crld script. Affected component is CA Privileged Access Manager 2.x (update_crld script). Underlying cause...
Security Bulletin: IBM Tivoli Monitoring TEP Server vulnerabilities
Summary By default, communications between the Tivoli Enterprise Portal client and server are not encrypted which can cause the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-1181 DESCRIPTION: IBM Tivoli Monitoring Portal client could allow a local attacker to gain elevated...
CVE-2017-3936
OS Command Injection vulnerability in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output...
MSTAR Set-Top BOX Command Injection Vulnerability
MSTAR is a set-top box. A command injection vulnerability exists in MSTAR Set-Top BOX. An attacker can exploit the vulnerability to execute arbitrary commands...
SIEMENS SCALANCE M875 Command Injection Vulnerability
SCALANCE M industrial routers are used for secure remote access to the plant via mobile networks, e.g. GPRS or UMTS, with integrated security features such as firewalls to prevent unauthorized access and VPNs to protect data transmission. A command injection vulnerability exists in the SIEMENS...
IBM Robotic Process Automation with Automation Anywhere Arbitrary Command Execution Vulnerability
IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A security vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 10.0, which stems from the program's failure to properly encode...
CVE-2014-5220
The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local attackers to execute arbitrary commands as root...
Apache Struts 2 Struts 1 plugin Showcase OGNL code execution
Added: 06/06/2018 CVE: CVE-2017-9791 BID: 99484 Background Apache Struts is an open-source web application framework for developing Java EE web applications. The Struts 1 plugin allows developers to use Struts 1 Actions and ActionForms in Struts 2 applications. The Showcase application is an...
CVE-2017-16042
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution...
AZL-44547 CVE-2017-16042 affecting package js-jquery 3.5.0-4
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution...
Command injection
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution...
