CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

PT-2017-8707

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.5 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue...

PT-2017-3054

Name of the Vulnerable Software and Affected Versions WN-G300R3 firmware versions 1.03 and earlier Description The issue is caused by a buffer overflow in the firmware, which can be exploited by a remote attacker to execute arbitrary OS commands. Recommendations For WN-G300R3 firmware versions 1....

CVE-2016-8363: Undefined Security Weakness

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

CVE-2016-0325

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert...

PT-2016-4148

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 3.0.1.6 through 6.0 before 6.0.2 iFix5 Rational Quality Manager versions 3.0.1.6 through 6.0 before 6.0.2 iFix5 Rational Team Concert versions 3.0.1.6 through 6.0 before 6.0.2 iFix5...

Design/Logic Flaw

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

CVE-2016-0326

IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."...

PT-2016-4149

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management versions 3.0.1.6 before iFix8 IBM Rational Quality Manager RQM and Rational Collaborative Lifecycle Management versions 4.x before 4.0.7 iFix11 IBM Rational Quali...

Symantec Web Gateway OS Command Injection Vulnerability

Symantec Web Gateway is prone to a OS command injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-6428

Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349...

CVE-2016-6428: Undefined Security Weakness

Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349...

CVE-2016-6137

SAP TREX 7.10 Revision 63 is affected by CVE-2016-6137, a remote command execution vulnerability stemming from an unspecified function that enables arbitrary OS command execution via unknown vectors (aka SAP Security Note 2203591). The public documents do not reveal the exact vulnerable component...

Design/Logic Flaw

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

CVE-2016-6373

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

CVE-2016-4853

AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Happy Wardrobe...

PT-2016-6180

Name of the Vulnerable Software and Affected Versions AKABEi SOFT2 games affected versions not specified Description The issue allows remote attackers to execute arbitrary OS commands via crafted saved data. This has been demonstrated using Happy Wardrobe, indicating a potential for exploitation ...

CVE-2016-2875

IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors...

PT-2016-5261

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.1.x through 7.2.x before 7.2.7 Description The issue allows remote authenticated users to execute arbitrary OS commands as root. Recommendations For versions 7.1.x through 7.2.x before 7.2.7, update to versi...