Lucene search
+L

975 matches found

Positive Technologies
Positive Technologies
•added 2020/06/01 12:00 a.m.•1 views

PT-2020-13652

Name of the Vulnerable Software and Affected Versions QuickBox Community Edition versions 2.5.5 and earlier QuickBox Pro Edition versions 2.1.8 and earlier Description The issue allows the local www-data user to execute sudo mysql without a password. This means the www-data user can execute...

9CVSS0.02017EPSS
SaveExploits1References3
Mend
Mend
•added 2020/05/28 1:05 p.m.•2 views

CVE-2019-20807

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g., Python, Ruby, or Lua...

5.3CVSS0.00488EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2020/05/28 1:05 p.m.•48 views

CVE-2019-20807

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces e.g., Python, Ruby, or Lua...

6.1AI score0.00488EPSS
SaveExploits0References8
CNVD
CNVD
•added 2020/05/21 12:00 a.m.•23 views

Centreon Remote Code Execution Vulnerability (CNVD-2021-24277)

Centreon is a free and open source IT and application monitoring software. A remote code execution vulnerability exists in versions of Centreon prior to 19.04.15. The vulnerability can be exploited to execute arbitrary OS commands by placing shell metacharacters in the RRDdatabasestatuspath and...

9CVSS8.2AI score0.05415EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/05/21 12:00 a.m.•1 views

PT-2020-13398

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 19.04.15 Description The issue allows remote attackers to execute arbitrary OS commands. This can be achieved by placing shell metacharacters in RRDdatabase status path via a "main.get.php" request, and then visiting...

9CVSS0.05415EPSS
SaveExploits1References9
NVD
NVD
•added 2020/05/07 6:15 p.m.•32 views

CVE-2020-7805

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

10CVSS9.8AI score0.02574EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/05/07 5:06 p.m.•39 views

CVE-2020-7805

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

9.8AI score0.02574EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/07 12:00 a.m.•9 views

CVE-2020-7805: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on KT Slim egg IML500 R7283, R8112, R8424 and IML520 R8112, R8368, R8411 wifi device. This issue is a command injection allowing attackers to execute arbitrary OS commands...

10CVSS8.6AI score0.02574EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/05/07 12:00 a.m.•3 views

PT-2020-19802

Name of the Vulnerable Software and Affected Versions KT Slim egg IML500 versions R7283, R8112, R8424 KT Slim egg IML520 versions R8112, R8368, R8411 Description The issue discovered is a command injection, allowing attackers to execute arbitrary OS commands. This affects the wifi device...

10CVSS0.02574EPSS
SaveExploits0References5
OSV
OSV
•added 2020/03/25 2:15 p.m.•23 views

CVE-2020-10789

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

9.8CVSS7.8AI score
SaveExploits0References2
NVD
NVD
•added 2020/03/25 2:15 p.m.•24 views

CVE-2020-10789

openITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php...

10CVSS9.9AI score0.01996EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/25 2:15 a.m.•24 views

CVE-2020-5560

WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors...

10CVSS9.8AI score0.02274EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/25 2:15 a.m.•27 views

Design/Logic Flaw

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

10CVSS9.7AI score0.02274EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/03/25 2:15 a.m.•26 views

Command injection

WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors...

10CVSS9.7AI score0.02274EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/03/25 2:15 a.m.•7 views

CVE-2020-5556

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

10CVSS8.3AI score0.02274EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/25 1:25 a.m.•64 views

CVE-2020-5556

CVE-2020-5556 affects Shihonkanri Plus GOOUT CGI, specifically versions Ver1.5.8 and Ver2.2.10 . The vulnerability is an OS command injection (CWE-78) that enables a remote attacker to execute arbitrary commands on the affected system via unspecified vectors. The NVD entry assigns a high/critical...

10CVSS9.7AI score0.02274EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/25 12:00 a.m.•3 views

PT-2020-18531

Name of the Vulnerable Software and Affected Versions Shihonkanri Plus GOOUT versions 1.5.8 through 2.2.10 Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For versions 1.5.8 through 2.2.10, at the moment, there is no information about a newer versio...

10CVSS0.02274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/03/25 12:00 a.m.•4 views

PT-2020-12323

Name of the Vulnerable Software and Affected Versions openITCOCKPIT versions prior to 3.7.3 Description The issue allows attackers to execute arbitrary OS commands via shell metacharacters that are mishandled on an su command line in app/Lib/SudoMessageInterface.php. This is related to a web-base...

10CVSS0.01996EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2020/03/18 12:00 a.m.•5 views

PT-2020-12278

Name of the Vulnerable Software and Affected Versions PerlSpeak versions through 2.01 Description The issue allows attackers to execute arbitrary OS commands. This can be demonstrated through the use of system and 2-argument open. Recommendations For PerlSpeak versions through 2.01, consider...

9.8CVSS0.01281EPSS
SaveExploits0References8
Prion
Prion
•added 2020/03/09 7:15 p.m.•25 views

Design/Logic Flaw

BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3...

10CVSS9.8AI score0.02629EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder