Lucene search
+L

18151 matches found

CNNVD
CNNVD
added 2023/07/06 12:00 a.m.9 views

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L libzebra.so changehostname function, which can be exploited by an attacker to execute arbitrary commands on the system...

7.2CVSS8.1AI score0.0373EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.10 views

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a Lite industrial cellular router from Milesight. A command injection vulnerability exists in the Milesight UR32L zebra vlanname function, which can be exploited by an attacker to execute arbitrary commands on the system...

7.2CVSS8.1AI score0.03543EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.11 views

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L ysthirdparty checksystemuser function, which can be exploited by an attacker to execute arbitrary commands on the system...

7.2CVSS8.1AI score0.02184EPSS
SaveExploits0References3
Redos
Redos
added 2023/07/06 12:00 a.m.39 views

ROS-2-507

2.507 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

9.8CVSS8.2AI score0.06132EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.28 views

ROS-2-1297

2.1297 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

9.8CVSS7.9AI score0.06132EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.10 views

PT-2023-24392 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3 Description: An unauthorized access issue has been discovered, potentially allowing a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Th...

7.2AI score
SaveExploits0References6
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.11 views

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command execution vulnerability exists in the Milesight UR32L urvpnclient cmdnameaction function, which can be exploited by an attacker to execute arbitrary commands on the system...

8.8CVSS7.7AI score0.03028EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.18 views

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. The Milesight UR32L vtyshubus toolshexcute.constprop.1 feature suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...

8.8CVSS8.2AI score0.036EPSS
SaveExploits1References2
Redos
Redos
added 2023/07/06 12:00 a.m.21 views

ROS-2-1207

2.1207 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

7.8AI score0.06132EPSS
SaveExploits0
OSV
OSV
added 2023/07/05 8:15 p.m.11 views

CVE-2023-27198

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

6.8CVSS6.1AI score0.00592EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/05 8:15 p.m.19 views

CVE-2023-27198

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

6.8CVSS6.8AI score0.00592EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/05 8:15 p.m.27 views

Design/Logic Flaw

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

4.6CVSS6.8AI score0.00592EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/07/05 3:15 p.m.20 views

CVE-2023-35973

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.7AI score0.0136EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/05 3:15 p.m.1 views

CVE-2023-35973

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.1AI score0.0136EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/05 3:15 p.m.21 views

CVE-2023-35974

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.7AI score0.0136EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/05 3:15 p.m.29 views

CVE-2023-35972

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. This allows an attacker to full...

7.2CVSS7.6AI score0.01566EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/05 3:15 p.m.22 views

Command injection

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

5.8CVSS7.3AI score0.0136EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/07/05 3:15 p.m.26 views

Command injection

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

5.8CVSS7.3AI score0.0136EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/05 12:00 a.m.18 views

CVE-2023-27198

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

7.2AI score0.00592EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/07/05 12:00 a.m.37 views

CVE-2023-27198

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

7AI score0.00592EPSS
SaveExploits0References2
Rows per page
Query Builder