CVE-2019-12585: Improper Neutralization of Special Elements used in an OS Command

Apcupsd 0.3.915, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcupsdstatus.php...

CVE-2019-12569: Untrusted Search Path

A vulnerability in Viber before 10.7.0 for Desktop Windows could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI. An attacker could exploit this vulnerability by convincing a targeted user to follow...

PT-2019-12859

Name of the Vulnerable Software and Affected Versions Viber versions prior to 10.7.0 for Desktop Windows Description A vulnerability exists due to unsafe search paths used by the application URI, allowing an attacker to execute arbitrary commands on a targeted system. An attacker could exploit th...

SCALANCE PLC Command Execution

The vulnerability of the microprogrammed programmable logic controller SCALANCE is related to the insufficient neutralization of certain special elements. Exploiting this vulnerability allows an attacker with administrator privileges to execute arbitrary system commands...

Cisco Web Security Appliance Privilege Escalation

The vulnerability of the Cisco Web Security Appliance WSA’s reporting subsystem is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level...

PT-2019-19779

Name of the Vulnerable Software and Affected Versions NUUO Network Video Recorder Firmware versions 1.7.x through 3.3.x Description The issue allows unauthenticated attackers to execute arbitrary commands. This is achieved by using shell metacharacters in the handle load config.php file...

Python NumPy Library Command Injection (CVE-2019-6446)

A Command Injection vulnerability exists in Python NumPy library. An authenticated attacker can send a specially crafted pickle file to the affected target host and trigger arbitrary command execution...

Schneider Electric 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera Arbitrary OS Command Execution Vulnerability

Schneider Electric 1st Gen Pelco Sarix Enhanced Camera and Schneider Electric Spectra Enhanced PTZ Camera are products of Schneider Electric, France. The Schneider Electric 1st Gen Pelco Sarix Enhanced Camera is a series of fixed IP cameras and the Schneider Electric Spectra Enhanced PTZ Camera i...

Sierra Wireless AirLink Command Injection (CVE-2018-4061)

A command injection vulnerability exists in Sierra Wireless AirLink. An authenticated attacker can send A specially crafted HTTP request to the affected target host and trigger arbitrary command execution...

CVE-2018-7829

An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands...

CVE-2018-7825: Improper Neutralization of Special Elements used in a Command

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...

CVE-2019-1795

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed ...

CVE-2019-1775

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker cou...

CVE-2019-1781

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI...

CVE-2019-1776

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command ...

CVE-2019-1791

Cisco NX-OS Software Command Injection (CVE-2019-1791) affects the CLI of Cisco NX-OS; an authenticated local attacker with administrator credentials can exploit insufficient validation of CLI arguments to run arbitrary commands on the underlying Linux/OS with elevated privileges. Impact includes...

CVE-2019-1784

CVE-2019-1784 affects Cisco NX-OS Software CLI: insufficient validation of arguments in a specific CLI command allows an authenticated, local attacker to run arbitrary commands on the underlying Linux OS with root privileges. The issue arises from improper argument validation on the affected devi...

CVE-2019-1779

Cisco FXOS and NX-OS Software contain a command-injection vulnerability in the CLI due to insufficient validation of arguments for certain commands. An authenticated, local attacker with valid credentials could exploit this to execute arbitrary OS commands with elevated privileges on the affected...

CVE-2019-1775

Cisco NX-OS Software Command Injection vulnerability CVE-2019-1775 affects the CLI of Cisco NX-OS, where an authenticated local attacker can pass malicious CLI arguments to cause arbitrary commands to run on the underlying OS with elevated privileges. Exploitation requires valid administrator cre...

Cisco FXOS and NX-OS Command Injection Vulnerability (CNVD-2019-14616)

Cisco FXOS is the Firepower extensible operating system.Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A command injection vulnerability exists in the CLI of Cisco FXOS and NX-OS. The...