PT-2021-23991

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue allows an attacker to inject arbitrary operating system commands through a specific parameter in the email sending feature. Recommendations: For versions 8.20.0 and prior, conside...

CVE-2021-20854

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20854

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20864

Improper access control vulnerability in ELECOM routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...

CVE-2021-20854

ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors...

PT-2021-14295

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers versions 1.02.9 and prior Description: A buffer overflow issue allows a network-adjacent attacker with administrator privileges to execute arbitrary OS commands via unspecified vectors. Recommendations: For versions 1.02.9...

PT-2021-14307

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GST2 firmware versions 1.25 and prior ELECOM WRC-1167GST2A firmware versions 1.25 and prior ELECOM WRC-1167GST2H firmware versions 1.25 and prior ELECOM WRC-2533GS2-B firmware versions 1.52 and prior ELECOM WRC-2533GS2-W firmwa...

PT-2021-14297

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers WRH-733GBK firmware v1.02.9 and prior ELECOM LAN routers WRH-733GWH firmware v1.02.9 and prior Description: The issue allows a network-adjacent attacker with administrator privilege to execute arbitrary OS commands via...

PT-2021-14296

Name of the Vulnerable Software and Affected Versions: ELECOM LAN routers WRH-733GBK versions 1.02.9 and prior ELECOM LAN routers WRH-733GWH versions 1.02.9 and prior Description: The issue allows a network-adjacent attacker with administrator privilege to execute arbitrary OS commands via...

PT-2021-6620

Name of the Vulnerable Software and Affected Versions Zyxel ARMOR Z1/Z2 firmware affected versions not specified Description A command injection issue in the CGI program of the firmware could allow an attacker to execute arbitrary OS commands via a LAN interface. This is due to the lack of measur...

PT-2021-21215

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions 7.1 and all prior versions Description The issue allows a remote high privileged attacker to potentially exploit an OS command injection vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2021-23732

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system...

Command injection

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system...

CVE-2021-23732

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system...

PT-2021-15548

Name of the Vulnerable Software and Affected Versions docker-cli-js versions all Description The issue affects the Docker.command method in the docker-cli-js package. If a user can partially control the command parameter of this method, they can execute arbitrary OS commands on the host system...

CVE-2021-23732: Improper Neutralization of Special Elements used in an OS Command

This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system...

CVE-2021-20837: Improper Neutralization of Special Elements used in an OS Command

Movable Type 7 r.5002 and earlier Movable Type 7 Series, Movable Type 6.8.2 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.5002 and earlier Movable Type Advanced 7 Series, Movable Type Advanced 6.8.2 and earlier Movable Type Advanced 6 Series, Movable Type Premium 1.46 and earlier,...

PT-2021-14281

Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.5002 and earlier Movable Type versions 6.8.2 and earlier Movable Type Advanced versions 7 r.5002 and earlier Movable Type Advanced versions 6.8.2 and earlier Movable Type Premium version 1.46 and earlier Movable Type...

Aruba Instant Command Injection Vulnerability (CNVD-2021-89450)

Aruba Instant is a wireless network. Providing the only Wi-Fi solution that is easy to set up, Aruba Instant is vulnerable to a command injection vulnerability, which is caused by incorrect input validation in the web interface. An attacker could exploit the vulnerability to send a carefully...

CVE-2021-41315

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker with access to the console application to execute arbitrary OS commands and escalate privileges...