11790 matches found
CVE-2017-10811
Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors...
texlive-base Arbitrary Command Execution
The vulnerability of the texlive-base package in the TeX Live system is related to the inclusion of the mpost command in the list of commands allowed to be executed from the original TeX code. The mpost command allows for the execution of other programs during the compilation of TeX documents...
SUSE-SU-2017:2200-1 Security update for subversion
This update for subversion fixes the following issues: - CVE-2017-9800: A malicious, compromised server or MITM may cause svn client to execute arbitrary commands by sending repository content with svn:externals definitions pointing to crafted svn+ssh URLs. bsc1051362 - Malicious user may commit...
Cisco Virtual Network Function Element Manager Arbitrary Command Execution Vulnerability
Cisco Virtual Network Function Element Manager is the virtual network function element manager. A security vulnerability in the Cisco Virtual Network Function Element Manager command settings allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary...
Mercurial Command Injection Vulnerability
Mercurial is a software developer Matt Mackall developed a set of cross-platform distributed version control software written in the Python language . The software supports the simultaneous processing of plain text and binary files and so on. A remote command injection vulnerability exists in...
Cisco Releases Security Updates
Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...
[ASA-201708-14] subversion: arbitrary command execution
Arch Linux Security Advisory ASA-201708-14 ========================================== Severity: Critical Date : 2017-08-15 CVE-ID : CVE-2017-9800 Package : subversion Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-379 Summary ======= The package subversi...
[SECURITY] [DSA 3940-1] cvs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3940-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 13, 2017 https://www.debian.org/security/faq -...
[ASA-201708-6] git: arbitrary command execution
Arch Linux Security Advisory ASA-201708-6 ========================================= Severity: Critical Date : 2017-08-12 CVE-ID : CVE-2017-1000117 Package : git Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-377 Summary ======= The package git before...
[ASA-201708-7] mercurial: multiple issues
Arch Linux Security Advisory ASA-201708-7 ========================================= Severity: Critical Date : 2017-08-12 CVE-ID : CVE-2017-1000115 CVE-2017-1000116 Package : mercurial Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-378 Summary ======= The package...
DEBIAN-CVE-2017-9800
A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server to attack another...
CVE-2017-9800
A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server to attack another...
PT-2017-6680
Name of the Vulnerable Software and Affected Versions Fortinet FortiManager versions 5.0.x through 5.0.10 Fortinet FortiManager versions 5.2.x through 5.2.1 Description A SQL injection issue allows remote attackers to execute arbitrary commands via unspecified parameters. Recommendations For...
CVE-2017-2282
CVE-2017-2282 is a buffer overflow in the I-O DATA WN-AX1167GR wireless router firmware (versions 3.00 and earlier). The root cause is a buffer overflow in the device’s firmware that allows an attacker connected to the network to execute arbitrary commands on the device. Public sources (e.g., JVN...
PT-2017-15322
Name of the Vulnerable Software and Affected Versions WN-AX1167GR firmware versions 3.00 and earlier Description A buffer overflow issue allows an attacker to execute arbitrary commands via unspecified vectors. Recommendations For WN-AX1167GR firmware versions 3.00 and earlier, update to a versio...
CVE-2017-9479
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a...
I-O DATA WN-AX1167GR Buffer Overflow Vulnerability
The I-O DATA DEVICE WN-AX1167GR is a wireless router product from I-O DATA DEVICE Japan. A buffer overflow vulnerability exists in the WN-AX1167GR using firmware version 3.00 and earlier. An attacker can exploit this vulnerability to execute arbitrary commands...
I-O DATA WN-AX1167GR Buffer Overflow Vulnerability (CNVD-2017-20143)
The I-O DATA DEVICE WN-AX1167GR is a wireless router product from I-O DATA DEVICE Japan. A buffer overflow vulnerability exists in the WN-AX1167GR using firmware version 3.00 and earlier. An attacker can exploit this vulnerability to execute arbitrary commands...
PT-2017-18418
Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3 through 2016 Description A security feature bypass issue exists due to improper input handling. This could allow an attacker to execute arbitrary commands. Recommendations For Microsoft Outlook versions 2007...