PT-2021-3723 · Cisco · Cisco Small Business 220 Series Smart Switches

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: The issue concerns multiple vulnerabilities in the web-based management interface, potentially allowing an attacker to hijack a user session, execute...

Command Execution Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. A command execution vulnerability exists in the Zhongxin Golden Shield information security management system, which can be exploited by an attacker to...

Command Execution Vulnerability in CMS Backend

Knowledge CMS is an open source website builder. Know CMS backend command execution vulnerability, an attacker can exploit the vulnerability to execute arbitrary commands...

PT-2021-4479 · Restund · Restund

Name of the Vulnerable Software and Affected Versions: Restund affected versions not specified Description: The issue is related to the Restund TURN server, which can be instructed to open a relay to the loopback address range, potentially exposing private services running on localhost. An attack...

USN-4938-1: Unbound vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that Unbound contained multiple security issues. A remote attacker could possibly use these issues to cause a denial of service, inject arbitrary commands, execute arbitrary code, and...

ZOHO ManageEngine ServiceDesk Plus Input Validation Error Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP, an ITIL-based IT service management software from ZOHO, is vulnerable to an input validation error in versions prior to ZOHO ManageEngine ServiceDesk Plus SDP 11205, which could be exploited by an attacker to execute arbitrary commands with SYSTEM privilege...

Design/Logic Flaw

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to...

CVE-2021-20081

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges...

Design/Logic Flaw

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges...

CVE-2021-20081

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges...

CVE-2021-20081

CVE-2021-20081 affects ManageEngine ServiceDesk Plus (versions before 11205). The root cause is insufficient sanitisation of user input, enabling a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges. Affected product/version: SDP

SUSE SLES11 Security Update : supportutils (SUSE-SU-2019:13976-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:13976-1 advisory. - Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker...

Reg-viz reg-suit code injection vulnerability

Reg-viz reg-suit is an open source command line interface for reg-viz. Reg-viz reg-suit suffers from a code injection vulnerability that can be exploited by an attacker to execute arbitrary commands...

Command execution vulnerability in TOTOLINK T10 router (CNVD-2021-43462)

TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router, which can b...

CVE-2021-33356

Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component that can result in remote command execution with root privileges...

Privilege escalation

Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component that can result in remote command execution with root privileges...

CVE-2021-33356

Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component that can result in remote command execution with root privileges...

CVE-2021-20731

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors...

Design/Logic Flaw

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors...

Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group

Founded on August 30, 1985, Skyrise Technology Group, or "Skyrise" for short, is a leading provider of network security, big data and security cloud services in China. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group. An attacker...