Lucene search
+L

18139 matches found

NVD
NVD
added 2024/01/29 9:15 p.m.33 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2CVSS7.1AI score0.01769EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/01/29 12:0 a.m.34 views

CVE-2023-49038

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root...

7.2AI score0.01769EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/01/29 12:0 a.m.60 views

Cisco Unified Communications Products Command Execution Vulnerability

Cisco Unified Communications Products is a series of unified communications products from the U.S. company Cisco Cisco. A command execution vulnerability exists in Cisco Unified Communications Products that stems from improper handling of user-supplied data read into memory. An attacker could...

10CVSS7.5AI score0.02399EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/27 12:0 a.m.10 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A command execution vulnerability exists in versions of Ffmpeg prior to n6.1, which can be exploited by an attacker to execute arbitrary commands on a system...

9.8CVSS7.7AI score0.01192EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/27 12:0 a.m.6 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A command execution vulnerability exists in versions of Ffmpeg prior to n6.1, which can be exploited by an attacker to execute arbitrary commands on a system...

9.8CVSS7.7AI score0.0113EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/01/26 5:28 p.m.4 views

CVE-2024-20253

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to the improper processing of user-provided data that is being read into memory...

9.9CVSS9.6AI score0.02399EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/26 5:15 a.m.4 views

DEBIAN-CVE-2023-38323

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS9AI score0.01096EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/26 5:15 a.m.33 views

CVE-2023-38317

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS9.7AI score0.01096EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2024/01/26 5:15 a.m.39 views

CVE-2023-38323

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS7.4AI score0.01096EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2024/01/26 5:15 a.m.21 views

CVE-2023-38319

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS7.4AI score0.01096EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/01/26 12:0 a.m.52 views

CVE-2023-38319

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS9.8AI score0.01096EPSS
SaveExploits1
OSV
OSV
added 2024/01/26 12:0 a.m.26 views

CVE-2023-38319

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS7.5AI score
SaveExploits0References6
OSV
OSV
added 2024/01/26 12:0 a.m.33 views

CVE-2023-38318

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.8CVSS7.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2024/01/26 12:0 a.m.29 views

CVE-2023-38319

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

9.9AI score0.01096EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/01/25 6:21 p.m.44 views

CVE-2023-7227 Command Injection vulnerability in SystemK NVR 504/508/516

SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system DDNS settings that could allow an attacker to execute arbitrary commands with root privileges...

9.8CVSS10AI score0.01278EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/01/25 8:1 a.m.10 views

git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree

A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This allows the owner of the repository to cause arbitrary commands to be executed by other...

7.8CVSS7.3AI score0.00782EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/01/25 8:1 a.m.7 views

git: Bypass of safe.directory protections

A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This issue allows the owner of the repository to cause arbitrary commands to be executed by...

7.8CVSS7.3AI score0.00444EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.27 views

Cisco Unified Communications Products 安全漏洞

Cisco Unified Communications Products is a series of unified communications products from the U.S. company Cisco Cisco. A command execution vulnerability exists in Cisco Unified Communications Products that stems from improper handling of user-supplied data read into memory. An attacker could...

10CVSS7.5AI score0.02399EPSS
SaveExploits0References4
NVD
NVD
added 2024/01/24 6:15 p.m.24 views

CVE-2023-52039

An issue discovered in TOTOLINK X6000R v9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the sub415AA4 function...

9.8CVSS9.6AI score0.0077EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/24 6:15 p.m.19 views

CVE-2023-52038

An issue discovered in TOTOLINK X6000R v9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the sub415C80 function...

9.8CVSS9.6AI score0.0077EPSS
SaveExploits1References1
Rows per page
Query Builder