Design/Logic Flaw

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20638: Improper Neutralization of Special Elements used in an OS Command

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

PT-2021-14109

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-S affected versions not specified Description: The issue allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. There is no information available about the estimated number of...

CVE-2021-20639: Improper Neutralization of Special Elements used in an OS Command

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

PT-2021-14099

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: The issue allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. There is no information provided about the estimated numb...

PT-2021-14100

Name of the Vulnerable Software and Affected Versions: LOGITEC LAN-W300N/PGRB affected versions not specified Description: The issue allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. There is no information provided about the estimated numb...

Input validation

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISIPRIVCLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

CVE-2020-26193

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISIPRIVCLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

CVE-2020-26193: Improper Input Validation

Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISIPRIVCLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...

Command injection

The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To exploit the vulnerability, an authenticated attacker can send a POST request that executes arbitrary OS commands via shell metacharacters...

CentOS 8 : vim (CESA-2020:4453)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4453 advisory. - vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 Note that Nessus has not tested for this issu...

PT-2021-12470

Name of the Vulnerable Software and Affected Versions: Logstorage versions 8.0.0 and earlier ELC Analytics versions 3.0.0 and earlier Description: The issue allows remote attackers to execute arbitrary OS commands via a specially crafted log file. This can be exploited by sending a malicious log...

CVE-2013-2512

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic...

CVE-2013-2512

The CVE-2013-2512 entry concerns the ftpd gem for Ruby (version 0.2.1). Affected component: the FTP command handling (LIST/NLST) that accepts arguments containing shell metacharacters. Root cause: improper sanitization allows remote attackers to execute arbitrary OS commands through crafted FTP t...

PT-2021-19973

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.5.7b Description The issue allows admins to execute arbitrary OS commands by inspecting an HTML radio input element within the modules edit page and inserting a command. Recommendations For Zen Cart version 1.5.7b, as a...

Xiaomi AX1800 and other command injection vulnerabilities

The Xiaomi AX1800 is a router from the Chinese company Xiaomi. A command injection vulnerability exists in Xiaomi AX1800 and others, which can be exploited by an attacker to submit a special request to inject arbitrary OS commands and execute them...

CVE-2020-29495

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS with high...

Command injection

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS with high...

CVE-2020-29495

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS with high...