Remote code execution

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2021-21819

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

IBM Security Access Manager Command Injection Vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. A command injection vulnerability exists in IBM Security Access Manager Docker,...

CVE-2021-21819: Improper Neutralization of Special Elements used in an OS Command

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2021-14795

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A code execution issue exists in the Libcli Test Environment functionality. It can be triggered by a specially crafted network request, leading to arbitrary command execution. An attacker can exploit...

D-LINK DIR-3040: Operating System Command Injection Vulnerability

The D-LINK DIR-3040 is a router from D-Link in Taiwan, China, that provides connectivity to the network.An operating system command injection vulnerability exists in the D-LINK DIR-3040, which stems from a code execution vulnerability in the Libcli test environment functionality. A specially...

Advantech R-SeeNet operating system command injection vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms, and is available for Linux and Windows platforms.An OS command injection vulnerability exists in Advantech R-SeeNet ping.php, which stems fro...

[ASA-202107-25] ruby2.6: multiple issues

Arch Linux Security Advisory ASA-202107-25 ========================================== Severity: High Date : 2021-07-14 CVE-ID : CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 Package : ruby2.6 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2140 Summary ======= The...

IBM Security Access Manager command injection vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. A command injection vulnerability exists in IBM Security Access Manager Docker,...

Western Digital WD My Book Live Duo Command Execution

The vulnerability of the microprogrammed software for Western Digital WD My Book Live and WD My Book Live Duo exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute...

Django QuerySet Order By Command Execution

The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for handling SQL queries. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

Unspecified Vulnerability in QSAN SANOS

QSAN SANOS is the SAN storage management operating system from QSAN China. It comes with a refreshingly easy-to-use Web GUI and can be easily deployed into any infrastructure. A security vulnerability exists in QSAN SANOS that stems from the QSAN SANOS Restore Factory Settings feature not filteri...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34616

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34616

CVE-2021-34616 concerns Aruba ClearPass Policy Manager and describes a remote arbitrary command execution vulnerability. Multiple connected sources specify impact on versions prior to 6.10.0, 6.9.6, and 6.8.9. A CNVD/PRION-type description attributes the root cause to inadequate input validation ...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34610

The CVE-2021-34610 entry concerns Aruba ClearPass Policy Manager. A remote arbitrary command execution vulnerability affects versions prior to 6.10.0, 6.9.6 and 6.8.9. It is documented as an issue that Aruba has released updates to address. Connected sources consistently describe this vulnerabili...

CVE-2021-34611

CVE-2021-34611 describes a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager prior to version 6.10.0, 6.9.6, and 6.8.9. The issue allows an attacker to execute commands on the underlying system remotely (no user interaction required per CVSS data), making it a hig...

CVE-2021-34611

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34614: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...