CVE-2014-2906

The psub function in fish aka fish-shell 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name...

Design/Logic Flaw

Iris 3.8 before build 1548, as used in Xpient point of sale POS systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer...

OS Command Injection

codecov is vulnerable to OS command injection. Lack of validation and sanitization of the gcov-args allows an attacker to inject and execute arbitrary OS commands on the system...

CVE-2018-8029

A flaw was found in Apache Hadoop in versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4. A user who can escalate to a yarn user can possibly run arbitrary commands as root user. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

The vulnerability of the ThinPro Linux operating system’s VPN implementation allows a hacker to execute arbitrary commands in the superuser mode.

The vulnerability of the ThinPro Linux operating system’s VPN implementation exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands in superuser mode...

The vulnerability of the Citrix Receiver function on the ThinPro Linux operating system, allowing a hacker to execute arbitrary commands.

The vulnerability of the Citrix Receiver function in the ThinPro Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

CVE-2019-16005

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the...

Input validation

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in t...

Input validation

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the...

CVE-2019-16005 Cisco Webex Video Mesh Node Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the...

CVE-2019-16005

CVE-2019-16005 affects Cisco Webex Video Mesh nodes, via the web-based management interface. The flaw is due to improper validation of user-supplied input, exploitable by an authenticated attacker with administrative privileges who sends crafted requests to the application. A successful exploit c...

CVE-2019-12629 Cisco SD-WAN vManage Command Injection Vulnerability

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in t...

CVE-2019-12629 Cisco SD-WAN vManage Command Injection Vulnerability

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for certain fields in t...

CVE-2019-12629

The CVE-2019-12629 issue pertains to Cisco SD-WAN vManage WebUI. Affected component: WebUI of Cisco SD-WAN Solution; root cause: insufficient input validation of data parameters in login-related fields. Exploitation: an authenticated remote attacker can configure a malicious username on the login...

Pandora FMS Command Injection (CVE-2019-20224)

A command injection vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary commands on the affected system...

CVE-2013-1744

IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands...

Command injection

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument...

Command injection

IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands...

CVE-2020-7596

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument...

CVE-2020-7596

CVE-2020-7596 affects the codecov-node npm module and its code path that processes the gcov-args/gcov-root argument. Multiple connected sources confirm that codecov-node prior to 3.6.5 (and originally up to 3.6.2 for the core CVE-2020-7596 fix) allows remote attackers to execute arbitrary command...