CVE-2022-43541

CVE-2022-43541 affects Aruba EdgeConnect Enterprise Software via the built-in command line interface. The vulnerability allows remote authenticated users to execute arbitrary commands as root on the underlying OS, potentially leading to complete system compromise. Affected software and versions a...

CVE-2022-37924

Aruba EdgeConnect Enterprise Software contains a command-line interface vulnerability (CVE-2022-37924) that allows remote authenticated users to execute arbitrary commands as root on the underlying OS, potentially leading to full system compromise. Affected versions include ECOS 9.2.1.0 and below...

CVE-2022-37923

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37923

The CVE-2022-37923 issue affects Aruba EdgeConnect Enterprise Software, specifically the EdgeConnect Enterprise command line interface. The vulnerability enables remote authenticated users to execute arbitrary commands with root privileges on the underlying OS, potentially resulting in complete s...

CVE-2022-37922

CVE-2022-37922 affects Aruba EdgeConnect Enterprise Software via the EdgeConnect CLI. The vulnerability allows remote authenticated users to execute arbitrary commands on the underlying host with root privileges, potentially leading to complete system compromise. Affected versions include ECOS 9....

CVE-2022-37922

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-37921

Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete...

CVE-2022-22984

A vulnerability was found in the snyk-hex-plugin for snyk. This issue allows an attacker to run arbitrary commands on the host system where the Snyk CLI is installed by passing crafted command line flags...

Command injection

The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin...

Command Execution Vulnerability in Golden Power Grid's Trusted O&M Management System

Golden Grid AnTrust O&M Management System provides a professional "human-machine" interactive O&M platform and professional "human-machine" delivery solutions. There is a command execution vulnerability in the Golden Grid Secure O&M Management System, which can be exploited by attackers to execut...

GNU Emacs Command Injection Vulnerability

GNU Emacs is a family of text editors from the GNU community in the U.S. A command injection vulnerability exists in GNU Emacs version 28.2 and earlier, which stems from lib-src/etags.c's use of system C library functions when implementing the ctags program. An attacker could exploit the...

CVE-2022-22984 Command Injection

The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin...

PT-2022-24154 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise Software versions prior to 9.2.1.0 Aruba EdgeConnect Enterprise Software versions prior to 9.1.3.0 Aruba EdgeConnect Enterprise Software versions prior to 9.0.7.0 Aruba EdgeConnect Enterprise Software versions pri...

CVE-2022-36964

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands...

Command injection

SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands...

Deserialization of untrusted data

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands...

CVE-2022-36962 SolarWinds Platform Command Injection

SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands...

SolarWinds Platform 命令注入漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from a command injection vulnerability that stems from susceptibility to command injection and allows a remote attacker to take full control of...

Ian Dunn: Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands

Summary Due to the improper usage of the PS1 environment variable in .bashprompt of dotfiles, a malicious repository can execute arbitrary commands when changed the current directory to it. Description The PS1 environment variable of bash supports command substitutions. For example, setting PS1 t...

D-Link DIR-818LW Command Injection (CVE-2022-35620)

A command injection vulnerability exists in D-Link DIR-818LW. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...