Lucene search
+L

18168 matches found

CNNVD
CNNVD
added 2023/05/16 12:00 a.m.9 views

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect Enterprise. An attacker exploiting this vulnerability could run arbitrary commands on the underlying host...

8.8CVSS8.3AI score0.01037EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/16 12:00 a.m.17 views

PT-2023-3785 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: The issue exists in the command line interface of Aruba EdgeConnect Enterprise, allowing remote authenticated users to run arbitrary commands on the underlying host...

9CVSS8.8AI score0.01037EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/05/16 12:00 a.m.13 views

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect Enterprise. An attacker exploiting this vulnerability could run arbitrary commands on the underlying host...

8.8CVSS8.3AI score0.0108EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/05/16 12:00 a.m.16 views

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect Enterprise. An attacker exploiting this vulnerability could run arbitrary commands on the underlying host...

8.8CVSS8.3AI score0.01037EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/16 12:00 a.m.10 views

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect Enterprise. An attacker exploiting this vulnerability could run arbitrary commands on the underlying host...

8.8CVSS8.3AI score0.01037EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/05/16 12:00 a.m.15 views

CVE-2023-31856

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594B20200910 allows attackers to execute arbitrary commands via a crafted http packet...

8.1AI score0.02909EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/12 9:15 p.m.37 views

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

7.2CVSS7.4AI score0.01001EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/12 9:15 p.m.10 views

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

7.2CVSS7.3AI score0.01001EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/12 9:15 p.m.28 views

Deserialization of untrusted data

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

5.8CVSS7.7AI score0.01001EPSS
SaveExploits0References1Affected Software2
OpenVAS
OpenVAS
added 2023/05/12 12:00 a.m.32 views

CMS Made Simple <= 2.2.16 SQLi Vulnerability

CMS Made Simple is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS9.2AI score0.01332EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/05/12 12:00 a.m.47 views

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

7.6AI score0.01001EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/05/10 12:00 a.m.40 views

Microsoft Windows Multiple Vulnerabilities (KB5026382)

This host is missing a critical security update according to Microsoft KB5026382 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.84386EPSS
SaveExploits3References3
Veracode
Veracode
added 2023/05/09 12:01 p.m.21 views

Remote Code Execution (RCE)

wwbn/avideo is vulnerable to Remote Code Execution RCE. The vulnerability exists due to a lack of validation in cloneClient.json.php which allows an admin authenticated attacker to inject and execute arbitrary commands...

8.8CVSS8.9AI score0.05175EPSS
SaveExploits3References2Affected Software1
OpenVAS
OpenVAS
added 2023/05/09 12:00 a.m.16 views

Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2023-1801)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/08 3:15 p.m.48 views

CVE-2023-22788

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

8.8CVSS8.4AI score0.01704EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/08 3:15 p.m.29 views

CVE-2023-22789

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

8.8CVSS8.4AI score0.01664EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/08 3:15 p.m.20 views

Command injection

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

6.5CVSS9.4AI score0.01704EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2023/05/08 3:15 p.m.27 views

Command injection

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

6.5CVSS9.4AI score0.01704EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2023/05/08 2:15 p.m.30 views

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

9.8CVSS9.9AI score0.0084EPSS
SaveExploits1References2
NVD
NVD
added 2023/05/08 2:15 p.m.28 views

CVE-2021-28999

SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1sortby parameter to modules/News/function.adminarticlestab.php...

8.8CVSS9.3AI score0.01332EPSS
SaveExploits1References2
Rows per page
Query Builder