Lucene search
+L

9120 matches found

CNVD
CNVD
added 2023/01/30 12:00 a.m.58 views

Siretta QUARTZ-GOLD OS Command Injection Vulnerability

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to cause arbitrary command execution via a crafted network request...

9.8CVSS5.1AI score0.0347EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.38 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17072)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution via specially crafted network packets...

7.2CVSS6.9AI score0.02207EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.46 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17073)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution via specially crafted network packets...

9.8CVSS6.9AI score0.02692EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/01/30 12:00 a.m.16 views

FreshTomato 操作系统命令注入漏洞

FreshTomato is a Linux-based open source firmware from FreshTomato Open Source. The firmware provides a variety of features for Broadcom-based routers. A security vulnerability exists in FreshTomato version 2022.5 that stems from the presence of operating system command injection, which can be...

9.8CVSS8.5AI score0.06013EPSS
SaveExploits1References3
CNVD
CNVD
added 2023/01/30 12:00 a.m.54 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17088)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

7.2CVSS6.8AI score0.01716EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.35 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17086)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

7.2CVSS6.8AI score0.01665EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/01/30 12:00 a.m.10 views

PT-2023-14122 · Unknown · Freshtomato

Name of the Vulnerable Software and Affected Versions: FreshTomato version 2022.5 Description: A specially crafted HTTP request can lead to arbitrary command execution due to an OS command injection vulnerability in the httpd logs/view.cgi functionality. This allows an attacker to send an HTTP...

9.8CVSS9.3AI score0.06013EPSS
SaveExploits1References3
CNVD
CNVD
added 2023/01/30 12:00 a.m.53 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17090)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

7.2CVSS6.8AI score0.01716EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.50 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17071)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution via specially crafted network packets...

7.2CVSS6.9AI score0.01665EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.61 views

Siretta QUARTZ-GOLD OS Command Injection Vulnerability (CNVD-2023-17092)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to cause arbitrary command execution by sending a crafted network reque...

9.8CVSS5AI score0.03233EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.76 views

Siretta QUARTZ-GOLD OS Command Injection Vulnerability (CNVD-2023-17093)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to cause arbitrary command execution by sending a crafted network reque...

9.8CVSS5AI score0.03499EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.41 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17091)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution by sending specially crafted network packets...

7.2CVSS6.8AI score0.01665EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/01/30 12:00 a.m.41 views

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17085)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to cause arbitrary command execution by sending a specially crafted network packet...

9.8CVSS5.2AI score0.01666EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/01/27 5:57 p.m.54 views

CVE-2021-39217 OpenMage LTS arbitrary command execution in custom layout update through blocks

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue...

7.2CVSS7.5AI score0.01319EPSS
SaveExploits0References4
OSV
OSV
added 2023/01/27 12:54 a.m.44 views

GHSA-C9Q3-R4RV-MJM7 Fix for arbitrary command execution in custom layout update through blocks

Impact Custom Layout enabled admin users to execute arbitrary commands via block methods...

7.2CVSS7.2AI score0.01319EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/26 11:57 p.m.48 views

GHSA-6325-6G32-7P35 flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution

flashtool Gem for Ruby contains a flaw that is triggered during the handling of downloaded files that contain shell characters. With a specially crafted file, a context-dependent attacker can execute arbitrary commands...

9.8CVSS9.7AI score0.01685EPSS
SaveExploits0References4
NVD
NVD
added 2023/01/26 10:15 p.m.42 views

CVE-2022-42493

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

9.8CVSS10AI score0.03499EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/26 10:15 p.m.10 views

CVE-2022-42490

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

9.8CVSS5.9AI score0.0347EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/26 10:15 p.m.37 views

CVE-2022-42490

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

9.8CVSS10AI score0.0347EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/26 10:15 p.m.41 views

CVE-2022-42491

Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...

9.8CVSS10AI score0.03233EPSS
SaveExploits0References2
Rows per page
Query Builder