CVE-2019-14904

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

CVE-2019-14904: Improper Input Validation

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

CVE-2020-24364

MineTime (version 1.8.5 and earlier) is affected by CVE-2020-24364. The vulnerability allows arbitrary command execution via the notes field in a meeting invitation, potentially leading to remote code execution. The CVSS metrics indicate a high-severity impact (CVSSv3.1 HR, network attack vector,...

CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite...

PT-2020-15708

Name of the Vulnerable Software and Affected Versions MineTime versions prior to 1.9 Description The issue allows arbitrary command execution via the notes field in a meeting, which could lead to remote code execution RCE via a meeting invite. Recommendations For versions prior to 1.9, update to...

CVE-2020-24054

The CVE-2020-24054 issue affects Moog EXO Series EXVF5C-2 and EXVP7C2-3 administration consoles. The vulnerability arises from a privileged “statusbroadcast” feature that can spawn a specified binary repeatedly at set intervals as root. Although the feature accepts only a binary path without argu...

CVE-2020-7710

This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine...

CVE-2020-7710

This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine...

CVE-2020-7710 Sandbox Escape

This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine...

CVE-2020-7710: Improper Control of Generation of Code

This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine...

PT-2020-15631

Name of the Vulnerable Software and Affected Versions Moog EXO Series versions affected versions not specified Description The administration console of the Moog EXO Series units has a feature that allows spawning a process repeatedly at a certain time interval as 'root'. This feature can be...

CVE-2020-13826

A CSV injection aka Excel Macro Injection or Formula Injection issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export...

PT-2020-15665

Name of the Vulnerable Software and Affected Versions ShopXO version 1.8.1 Description The issue allows attackers to execute arbitrary commands, potentially leading to server control. Recommendations For ShopXO version 1.8.1, update to a newer version that contains a fix for this issue. At the...

Design/Logic Flaw

In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system...

CVE-2020-15692

In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one argument to the underlying open command to execute arbitrary registered system...

PT-2020-14587

Name of the Vulnerable Software and Affected Versions Nim version 1.2.4 Description The standard library browsers in Nim mishandle the URL argument to browsers.openDefaultBrowser, allowing an attacker to pass an argument to the underlying open command and execute arbitrary registered system...

PT-2020-14743

Name of the Vulnerable Software and Affected Versions VNG Zalo Desktop version 19.8.1.0 Description An issue was discovered in Zalo.exe that allows an attacker to run arbitrary commands on a remote Windows machine running the Zalo client. This can be achieved by sending the user of the device a...

Arbitrary Command Execution

spamassassin is vulnerable to command execution. The vulnerability exists as crafted nefarious Configuration .cf files can be configured to run system commands similar to CVE-2018-11805...

PT-2020-5338

Name of the Vulnerable Software and Affected Versions D-Link DSR-250 version 3.17 D-Link DSR-150 affected versions not specified D-Link DSR-150N affected versions not specified D-Link DSR-250N affected versions not specified D-Link DSR-500 affected versions not specified D-Link DSR-500N affected...