CVE-2017-12548

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

CVE-2017-5828

CVE-2017-5828 affects HPE Aruba ClearPass Policy Manager, version 6.6.x. Multiple connected records describe an arbitrary command execution vulnerability in this product family. The CNVD entry further states the issue exists in versions prior to 6.6.5, implying a fix in 6.6.5 or later, but the do...

CVE-2017-12547

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

PT-2018-5022

Name of the Vulnerable Software and Affected Versions HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software versions prior to v12.6 Description A Remote Arbitrary Command Execution issue was discovered in the software. The problem was resolved in LeftHand OS v12.6 or any subsequent version...

PT-2018-8287

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description An arbitrary command execution issue was discovered in the software. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the moment, there is no information abou...

CVE-2017-12547: Undefined Security Weakness

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

CVE-2017-5828: Improper Restriction of XML External Entity Reference

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-12551: Undefined Security Weakness

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

CVE-2017-12548: Undefined Security Weakness

A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

PT-2018-5418

Name of the Vulnerable Software and Affected Versions: HPE System Management Homepage versions prior to 7.6.1 Description: A local arbitrary command execution issue was discovered in HPE System Management Homepage. Recommendations: For versions prior to 7.6.1, update to version 7.6.1 or later to...

CVE-2016-8529: Improper Access Control

A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version...

PT-2018-5424

Name of the Vulnerable Software and Affected Versions: HPE System Management Homepage versions prior to 7.6.1 Description: A local arbitrary execution of commands issue was discovered in HPE System Management Homepage. Recommendations: For versions prior to 7.6.1, update to version 7.6.1 or later...

[ASA-201802-4] plasma-workspace: arbitrary command execution

Arch Linux Security Advisory ASA-201802-4 ========================================= Severity: High Date : 2018-02-09 CVE-ID : CVE-2018-6791 Package : plasma-workspace Type : arbitrary command execution Remote : No Link : https://security.archlinux.org/AVG-607 Summary ======= The package...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

NetEx HyperIP Post-Auth Command Execution

Vulnerability Details Affected Vendor: NetEx Affected Product: HyperIP Affected Version: 6.1.0 Platform: Embedded Linux CWE Classification: CWE-78: Improper Neutralization of Special Elements used in an OS Command, CWE-250: Execution with Unnecessary Privileges Impact: Arbitrary Command...

Cisco UCS Central Arbitrary Command Execution Vulnerability

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

Command injection

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...

CVE-2018-6791

An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains or $ in its volume label is plugged in and mounted through the device notifier, it's interpreted as a shell command, leading to a possibility of arbitrary...