18168 matches found
Microsoft Windows Multiple Vulnerabilities (KB5034119)
This host is missing an important security update according to Microsoft KB5034119 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-51126
Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 Jan 2023 the FLIR AX8 should no longer be affected by the...
Ivanti Connect Secure 9.x / 22.x Multiple Vulnerabilities
The Ivanti Connect Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in the web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted...
Microsoft Windows Multiple Vulnerabilities (KB5034127)
This host is missing an important security update according to Microsoft KB5034127 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5034121)
This host is missing an important security update according to Microsoft KB5034121 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5034122)
This host is missing an important security update according to Microsoft KB5034122 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Important: bluez
Issue Overview: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 Affected Packages: bluez Issue Correction: Run dnf update bluez --releasever 2023.3.20240108 or dnf update --advisory ALAS2023-2024-473 --releasever 2023.3.2024010...
Command Injection
PaddlePaddle is vulnerable to Command Injection. The vulnerability is caused due to improper command validation within the wgetdownload' method. The attacker can execute arbitrary commands on the operating system...
TOTOLINK X6000R Command Execution Vulnerability (CNVD-2024-04922)
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in TOTOLINK X6000R version v9.4.0cu.852B20230719, which stems from the component /cgi-bin/cstecgi.cgi failing to correctly filter constructed command special characters, commands,...
PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle before 2.6.0 has a command injection in getonlinepassinterval. This resulted in the ability to execute arbitrary commands on the operating system...
PaddlePaddle command injection in _wget_download
PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...
GHSA-3CR5-2446-8PG3 PaddlePaddle command injection in convert_shape_compare
PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...
GHSA-RF7P-79XQ-8XWM PaddlePaddle command injection in _wget_download
PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...
GHSA-J5H9-9R39-43Q5 PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle before 2.6.0 has a command injection in getonlinepassinterval. This resulted in the ability to execute arbitrary commands on the operating system...
PaddlePaddle command injection in convert_shape_compare
PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...
CVE-2023-52314
PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...
CVE-2023-52314
PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...
CVE-2023-52310
PaddlePaddle before 2.6.0 has a command injection in getonlinepassinterval. This resulted in the ability to execute arbitrary commands on the operating system...