CVE-2021-33036

CVE-2021-33036 affects Apache Hadoop (versions 2.2.0–2.10.1, 3.0.0–3.1.4, 3.2.0–3.2.2, 3.3.0–3.3.1). The issue arises from improper permission handling that could let an authenticated user who escalates to the yarn user run arbitrary commands with root privileges. The impact is elevated privilege...

Microsoft Windows Multiple Vulnerabilities (KB5014748)

This host is missing an important security update according to Microsoft KB5014748 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Cross site request forgery (csrf)

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-31311

CVE-2022-31311 affects WAVLINK AERIAL X 1200M (firmware M79X3.V5030.180719). The adm.cgi component processes a crafted POST and enables arbitrary command execution via a POST payload, due to the command-injection pathway described in CNVD-2022-61031 and corroborated by Red Hat/NVD entries. Impact...

CVE-2022-31311

An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request...

SolarView Compact Command Injection (CVE-2022-29303)

A command injection vulnerability exists in SolarView Compact. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Okta Access Gateway Command Injection (CVE-2021-28113)

A command injection vulnerability exists in Okta Access Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Security Updates for Microsoft Office Products C2R (December 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43256, CVE-2021-43875 - An...

Security Updates for Microsoft Office Products C2R (December 2020)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

Security Updates for Microsoft Excel Products C2R (January 2022)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Two remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21840, CVE-2022-21841...

Security Updates for Microsoft Excel Products C2R (July 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has inste...

CVE-2022-29013

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...

CVE-2022-29013

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...

Medium: git

Issue Overview: A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This allows the owner of the repository to cause arbitrary commands to be...

Zoho ManageEngine ADSelfService Plus Command Injection (CVE-2022-28810)

A command injection vulnerability exists in Zoho ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

SonicWall SMA 100 Command Injection (CVE-2021-20039)

A command injection vulnerability exists in SonicWall SMA 100. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tenda HG6 Command Injection Vulnerability

Tenda HG6 is an intelligent routing passive optical network terminal from Tenda, China.A command injection vulnerability exists in Tenda HG6, which stems from the failure of the pingAddr and traceAddr parameters to properly filter the construction of command special characters, commands, etc. An...

SAP NetWeaver SQL Injection Vulnerability

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2022-29013

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...

Dell PowerStore OS Command Injection Vulnerability

Dell PowerStore all-flash data storage appliances use a data-centric, highly adaptable and intelligent infrastructure to deliver AppsON capabilities that enable the transformation of traditional and modern workloads.Dell PowerStore is vulnerable to an operating system command injection...