PT-2016-7207

Name of the Vulnerable Software and Affected Versions WatchGuard RapidStream appliances affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands by using a crafted ifconfig command. Recommendations At the moment, there is no...

imo cloud Office system get_file.php parameter nid arbitrary command execution vulnerability

No description provided by source...

CVE-2016-1365: Improper Input Validation

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507...

PT-2016-4816

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server Expressway version X8.5.2 Description The administrative web interface in Cisco TelePresence Video Communication Server Expressway allows remote authenticated users to execute arbitrary commands vi...

CVE-2016-1430: Improper Input Validation

Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592...

Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway is a TelePresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end-users using a variety of communication tools. A remote...

PT-2016-2702

Name of the Vulnerable Software and Affected Versions Crestron AirMedia AM-100 versions prior to 1.4.0.13 Description The issue is related to a directory traversal vulnerability in the cgi-bin/rftest.cgi file of the Crestron AirMedia AM-100 presentation server's firmware. This vulnerability can b...

Arbitrary Command Execution Vulnerability in Internet Audit Device of Shenzhen Aolian Information Security Technology Co.

Shenzhen Aolian Information Security Technology Co., Ltd. Internet access auditing device is a network behavior management system. Shenzhen Aolian Information Security Technology Co., Ltd. Internet Audit Equipment has an arbitrary command execution vulnerability, which can be exploited by attacke...

Arbitrary Command Execution Vulnerability in D-Link Internet Behavior Management System

Internet behavior management system, a network auditing device. The product suffers from an arbitrary command execution vulnerability that can be exploited by an attacker to gain server privileges...

Arbitrary Command Execution Vulnerability in Internet Behavior Management System of Shanghai Bingfeng Computer Network Technology Co.

Shanghai Bingfeng Computer Network Technology Co., Ltd Internet behavior management system is a network audit equipment. The Internet behavior management system of Shanghai Bingfeng Computer Network Technology Co., Ltd. has an arbitrary command execution vulnerability, which can be exploited by...

Arbitrary Command Execution Vulnerability in Beijing Tianrongxin Internet Behavior Management Devices

Tianrongxin Internet Behavior Management System is a professional product for network behavior management and content auditing. Beijing Tianrongxin Internet Behavior Management device has an arbitrary command execution vulnerability, which can be exploited by attackers to gain server privileges...

CVE-2016-1608

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter...

Arbitrary Command Execution Vulnerability in DotDotStarlight Gateway Cloud Platform of Beijing DotDotStarlight Technology Co.

Beijing Dot Starlight Technology Co., Ltd. is a professional company specializing in the production of Internet access equipment. It mainly produces authentication billing system, PPPOE gateway, BRAS, machine room dynamic ring monitoring system, urban fire protection system, intelligent public...

Barracuda Web App Firewall and Load Balancer Remote Command Injection Vulnerability

Barracuda Web Application Firewall and Load Balancer are both products of Barracuda Networks. The former is a Web application firewall and the latter is an application delivery controller. The controller provides protection against intrusions and attacks, while optimizing application load and...

CVE-2016-1374: Improper Input Validation

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

[SECURITY] [DLA 564-1] tardiff security update

Package : tardiff Version : 0.1-1+deb7u1 CVE ID : CVE-2015-0857 CVE-2015-0858 Two vulnerabilities were found in tardiff: CVE-2015-0857 Arbitrary command execution was possible via shell metacharacters in the name of a 1 tar file or 2 file within a tar file. CVE-2015-0858 Local users could write t...

CA eHealth Denial of Service Vulnerability

CA eHealth is CA's suite of software for intelligently managing complex IT environments through the IT infrastructure. The software supports monitoring, collecting and analyzing network information from network performance, virtual systems and Cisco Unified Computing Systems to provide real-time...

ZTE enterprise gateway system voip_eone.be.php parameters hid_id, etc. 2 arbitrary command execution vulnerability

No description provided by source...

D-Link DCS-930L Camera Command Injection Vulnerability

The D-Link DCS-930L is a wireless surveillance camera from Terasic D-Link. A command injection vulnerability exists in the D-Link DCS-930L Camera. An attacker can exploit this vulnerability to execute arbitrary commands in the context of an affected device...

NetApp OnCommand System Manager Local Command Injection Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from the American company NetApp. A local command injection vulnerability exists in NetApp OnCommand System Manager version 8.3.x, which can be exploited by an attacker to inject arbitrary commands into the application...