CVE-2023-37424 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

CVE-2023-37424 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

CVE-2023-37424

CVE-2023-37424 affects the web-based management interface of Aruba EdgeConnect SD-WAN Orchestrator. The vulnerability allows an unauthenticated remote attacker to trigger arbitrary commands on the underlying host, potentially leading to complete system compromise. The issue arises from flaws in t...

Aruba Networks EdgeConnect SD-WAN Orchestrator 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a vulnerability in the web-based management interface, which allows arbitrary commands to be run o...

CVE-2020-21583

CVE-2020-21583 affects hwclock.13-v2.27. The issue allows attackers to gain escalated privileges or execute arbitrary commands via the path parameter when setting the date. The affected component is hwclock (part of util-linux). The provided documents do not include explicit exploitation status o...

CVE-2020-21583

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

CVE-2020-21583

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

PT-2023-11594 · Hwclock · Hwclock

Name of the Vulnerable Software and Affected Versions: hwclock version 2.27 Description: An issue was discovered that allows attackers to gain escalated privileges or execute arbitrary commands via the path parameter when setting the date. Recommendations: For version 2.27, consider restricting...

Aruba Networks EdgeConnect SD-WAN Orchestrator 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in the Aruba Networks EdgeConnect SD-WAN Orchestrator that stems from a flaw in the web-based management interface that could allow an authenticated, remote attacker to...

Linux hwclock 安全漏洞

Linux hwclock is a command from the Linux Foundation of America. It is used to display and set the hardware clock. A security vulnerability exists in Linux hwclock version 13-v2.27, which originated from a vulnerability that allows an attacker to gain escalated privileges or execute arbitrary...

CVE-2023-25915

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...

Input validation

Due to improper input validation, a remote attacker could execute arbitrary commands on the target system...

CVE-2023-25915 Authenticated Remote Command Execution in Danfoss AK-SM800A

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...

ASUSTOR Data Master Command Injection Vulnerability

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. ASUSTOR Data Master suffers from a command injection vulnerability that stems from the Printer service feature failing to properly filter constructed command special characters, commands, etc. The vulnerability...

CVE-2023-39416

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands...

CVE-2023-39416

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands...

CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request...

ELECOM wireless LAN routers 操作系统命令注入漏洞

ELECOM wireless LAN routers are a series of routers from ELECOM Japan. The ELECOM wireless LAN routers are vulnerable to an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability. An attacker could exploit this...

IBM Security Guardium Command Execution Vulnerability (CNVD-2023-66738)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A command execution vulnerability exists in IBM Security...

ELECOM LAN-WH300N/RE 安全漏洞

ELECOM lan is a router from ELECOM Japan. A security vulnerability exists in the LAN-WH300N/RE that originates from an unknown feature of the device that allows an authenticated user to execute arbitrary operating system commands from an administrative console...