11716 matches found
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
Command injection
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7630
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...
CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument...
CVE-2020-7625
op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...
CVE-2020-7624
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
CVE-2020-7623
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...
CVE-2020-7623
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument...
CVE-2020-7619
get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data...
CVE-2020-11107
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
Command injection
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
CVE-2020-11107
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
CVE-2020-7621: Improper Neutralization of Special Elements used in an OS Command
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the 'nginxCmd' function...
PT-2020-6944
Name of the Vulnerable Software and Affected Versions strong-nginx-controller versions 1.0.2 and earlier Description The issue allows for the execution of arbitrary commands as part of the nginxCmd function, due to a lack of measures to neutralize special elements. This can enable a remote attack...
CVE-2020-7624: Improper Neutralization of Special Elements used in an OS Command
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument...
PT-2020-19663
Name of the Vulnerable Software and Affected Versions karma-mojo versions 1.0.0 through 1.0.1 Description The issue allows execution of arbitrary commands via the config argument, enabling Command Injection attacks. Recommendations For karma-mojo versions 1.0.0 through 1.0.1, consider restricting...
CVE-2020-11107: Incorrect Permission Assignment for Critical Resource
An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary command execution...
Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-35517)
NETGEAR WC7500 and others are a wireless LAN controller from NETGEAR. An injection vulnerability exists in the requesthandler.php file in several NETGEAR products. A remote attacker can exploit this vulnerability by sending a specially crafted request to execute arbitrary commands...