21 matches found
EUVD-2025-34435
Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...
EUVD-2019-15581
Malware in sbrugna...
EUVD-2021-21378
Malware in sbrugna...
GHSA-557J-XG8C-Q2MM vulnerabilities
Vulnerabilities for packages: k8sgpt, flux-helm-controller, helm-operator, consul-k8s, zarf, istio, tw, pluto, helm-push, linkerd2, zot, k8ssandra-client, harbor, cilium-cli, k9s, trivy, envoy-gateway, flux-source-controller, cert-manager-cmctl, chartmuseum, cerbos, eksctl, kuma, chart-testing,...
CVE-2025-20308
A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. This vulnerability is due to insufficient restrictions during the execution of specific CLI commands. An attacker...
AWS SAM CLI < 1.133.0 multiple vulnerabilities
The version of AWS SAM CLI installed on the remote host is prior to 1.133.0 and is, therefore, affected by multiple vulnerabilities: - When running the AWS SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged...
Security Bulletin: IBM Cloud Pak System cli is vulnerable to sensitive information exposure
Summary IBM Cloud Pak System cli is vulnerable to sensitive information exposure. CVE-2023-37405, CVE-2023-38272 Vulnerability Details CVEID:CVE-2023-37405 DESCRIPTION: IBM Cloud Pak System stores sensitive data in memory, that could be obtained by an unauthorized user. CWE:CWE-311: Missing...
CVE-2025-23368
CVE-2025-23368 relates to the Wildfly Elytron integration exposing a brute-force risk for CLI authentication. Red Hat’s advisory RHSA-2026:18059 (and CVE-2025-23368‑specific RHSA-2026:18059-CVE-2025-23368) fixes this in Red Hat JBoss Enterprise Application Platform 8.1.6 and WildFly Core updates....
CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6
CVE-2023-45288 affecting package cf-cli for versions less than 8.7.3-6. A patched version of the package is available...
GHSA-Q4XQ-445G-G6CH vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, keycloak, keycloak-operator...
GHSA-69F9-H8F9-7VJF vulnerabilities
Vulnerabilities for packages: snyk-cli...
GHSA-XMMM-JW76-Q7VG vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
GHSA-G4GC-RH26-M3P5 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
GHSA-G4GC-RH26-M3P5 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
CVE-2023-20153
Multiple vulnerabilities in specific Cisco Identity Services Engine ISE CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid...
CVE-2022-20818
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a...
CVE-2022-23681
Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...
CVE-2021-34755
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory...
Information disclosure
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory...
CVE-2021-34721
Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details sectio...