11723 matches found
PT-2018-5300
Name of the Vulnerable Software and Affected Versions Corega CG-WGR1200 firmware versions 2.20 and earlier Description A buffer overflow issue allows an attacker to execute arbitrary commands via unspecified vectors. Recommendations For Corega CG-WGR1200 firmware versions 2.20 and earlier, update...
JVN#15201064: Multiple vulnerabilities in CG-WGR1200
CG-WGR1200 provided by Corega Inc is a wireless LAN router. CG-WGR1200 contains multiple vulnerabilities listed below. Buffer Overflow CWE-119 - CVE-2017-10852 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2|...
CVE-2017-10853: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors...
Chrome OS Arbitrary Command Execution Vulnerability
Google Chrome OS is a fast, lightweight, open source Web-based operating system developed by Google. A security vulnerability exists in Google Chrome OS versions prior to 53.0.2785.144. A remote attacker can exploit the vulnerability to execute arbitrary commands at boot time...
CVE-2016-5179: Improper Restriction of Operations within the Bounds of a Memory Buffer
Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot...
PT-2018-3768
Name of the Vulnerable Software and Affected Versions SAP CRM versions 7.01 through 7.54 Description The issue is related to insufficient validation of path information provided by users, allowing an attacker to exploit this weakness. This can lead to characters representing "traverse to parent...
CVE-2016-0291: Improper Neutralization of Special Elements used in an OS Command
IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging report server access. IBM X-Force ID: 111302...
ASUSWRT vpnupload.cgi authentication bypass
Added: 02/28/2018 CVE: CVE-2018-5999 Background ASUSWRT is the firmware used in many ASUS devices. Problem The combination of two separate vulnerabilities in ASUSWRT allows remote attackers to execute arbitrary commands. The first vulnerability allows an unauthenticated user to make certain POST...
KDE Plasma Workspace Command Execution Vulnerability
KDE Plasma Workspace is an umbrella term for all graphical environments developed by the KDE community and is part of KDE Software Compilation 4, the latest series of desktop environments. A security vulnerability exists in the soliduiserver/deviceserviceaction.cpp file in KDE Plasma Workspace...
Debian DLA-1294-1 : golang security update
It was discovered that there was an arbitrary command execution vulnerability in the Go programming language. The 'go get' implementation did not correctly validate 'import path' statements for '://' which allowed remote attackers to execute arbitrary OS commands via a crafted website. For Debian...
Red Hat libvirt util/virlog.c file arbitrary command execution vulnerability
Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability in the util/virlog.c file in Red Hat...
CVE-2018-6764
CVE-2018-6764 affects libvirt: util/virlog.c may fail to determine the hostname during LXC container startup, enabling a local attacker (guest OS user) to bypass container protections and run arbitrary commands via a crafted NSS module. The issue is concrete in libvirt’s LXC handling and NSS modu...
Trend Micro Email Encryption Gateway Arbitrary Command Execution Vulnerability
Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An arbitrary command execution vulnerability exists in Trend Micro Email...
Trend Micro Email Encryption Gateway Arbitrary Command Execution Vulnerability (CNVD-2018-04486)
Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An arbitrary command execution vulnerability exists in Trend Micro Email...
CVE-2018-6764: Origin Validation Error
util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...
MetInfo config/config_db.php file arbitrary command execution vulnerability
MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A security vulnerability exists in MetInfo version 6.0.0, which stems from sloppy filtering of the configuration file in the config/configdb.php file. An attacker can exploit the...
CVE-2018-7271
An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/configdb.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell...
CVE-2018-7046
Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C code in a "Pages - Edit - Template - Edit template properties - Layout" box. NOTE: the vendor has respond...
