CVE-2020-9413

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...

CVE-2020-5601

Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors...

CVE-2020-9413: Improper Neutralization of Input During Web Page Generation

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...

PT-2020-18574

Name of the Vulnerable Software and Affected Versions Chrome Extension for e-Tax Reception System version 1.0.0.0 Description The issue allows remote attackers to execute an arbitrary command. Recommendations For version 1.0.0.0, at the moment, there is no information about a newer version that...

Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution

Overview Chrome Extension for e-Tax Reception System provided by National Tax Agency is an extension to use the e-Tax Reception System on Google Chrome and/or Chromium-based versions of Microsoft Edge. When a user runs a Chrome Extension for e-Tax Reception System, a specially crafted parameter b...

JVN#40039627: Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution

Chrome Extension for e-Tax Reception System provided by National Tax Agency is an extension to use the e-Tax Reception System on Google Chrome and/or Chromium-based versions of Microsoft Edge. When a user runs a Chrome Extension for e-Tax Reception System, a specially crafted parameter by an...

CVE-2020-14950

CVE-2020-14950 affects aaPanel (up to version 6.6.6 and earlier). The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request under the Software Store settings menu. Root cause: insufficient validatio...

aaPanel Remote Code Execution Vulnerability

aaPanel is a simple but powerful control panel for Linux servers. A remote code execution vulnerability exists in aaPanel 6.6.6 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary commands via the Script Content box on the Add Cron Job interface...

CVE-2020-14421: Improper Neutralization of Argument Delimiters in a Command

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen...

CVE-2020-3269: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

CVE-2020-3268: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

PT-2020-2952

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions affected versions not specified Cisco RV130 versions affected versions not specified Cisco RV130W versions affected versions not specified Cisco RV215W versions affected versions not specified Description The issue is...

PT-2020-2957

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to multiple...

PT-2020-2951

Name of the Vulnerable Software and Affected Versions Cisco RV110W, RV130, RV130W, and RV215W Series Routers affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the affected routers, which could allow an...

PT-2020-2955

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 and RV325 Series Routers versions affected versions not specified Cisco Small Business RV016, RV042, and RV082 Routers versions affected versions not specified Description The issue is related to multiple...

PT-2020-2953

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 versions affected versions not specified Cisco Small Business RV325 versions affected versions not specified Cisco Small Business RV016 versions affected versions not specified Cisco Small Business RV042 versions...

PT-2020-5363

Name of the Vulnerable Software and Affected Versions NETGEAR RBK752 versions prior to 3.2.15.25 NETGEAR RBK753 versions prior to 3.2.15.25 NETGEAR RBK753S versions prior to 3.2.15.25 NETGEAR RBR750 versions prior to 3.2.15.25 NETGEAR RBS750 versions prior to 3.2.15.25 NETGEAR RBK842 versions pri...

Artica Pandora FMS Injection Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An injection vulnerability exists in the Events feature in Artica Pandora FMS version 7.44. An attacker can exploit this...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2021-22180)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the web management interface in Palo Alto Networks PAN-OS version 8.0 all versions, version 7.1 prior to 7.1.26, and version...

CVE-2020-9412 TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...