SUSE CVE-2022-30580

Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working directory named either "..com" or "..exe" by calling Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset...

PT-2023-35269 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the irq is not for aux transfer. The actual impact and attack plausibility have not yet been prove...

PT-2024-14699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible memory leak in the ovs meter cmd set function has been resolved. The issue occurred because old meter was not freed after being detached, regardless of whether the new meter w...

PT-2023-34999

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.9 Description The issue is related to the pt core execute cmd function not using a spinlock. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility have n...

PT-2023-35206

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.89 Description The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the irq is not for aux transfer. The actual impact and attack plausibility have not yet been proven...

PT-2023-35147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to the pt core execute cmd function not using a spinlock. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility ha...

PT-2023-15701

Name of the Vulnerable Software and Affected Versions Sunlogin Sunflower Simplified aka Sunflower Simple and Personal version 1.0.1.43315 Description Sunlogin Sunflower Simplified aka Sunflower Simple and Personal version 1.0.1.43315 is susceptible to a path traversal issue. A remote,...

CVE-2022-47339

In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47339

In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

PT-2025-13323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been identified in the Linux kernel, specifically in the ovs flow cmd new function. This issue arises when an allocation of a key fails, and the new flow object is not...

ASB-A-262503731

There is a Command injection In CMD Service, which may lead Eop issue...

PT-2023-34874 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the dp aux cmd fifo tx function, where it may not be completed if the irq is not for aux transfer. The actual impact and attack plausibility have not yet been prove...

Heap overflow

A heap-based buffer overflow vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability...

CVE-2022-41991: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability...

CVE-2022-40222: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

CVE-2022-41154: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the m2m DELETEFILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary file deletion. An attacker can send a network request to trigger this vulnerability...

PT-2023-13774

Name of the Vulnerable Software and Affected Versions Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description An OS command injection issue exists in the m2m DELETE FILE cmd functionality. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a...

PT-2023-34422

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential issue exists where a use-after-free error occurs in the ar5523 cmd function when it times out. The actual impact and likelihood of an attack have not been confirmed...

PT-2023-34641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A potential issue exists where a use-after-free error occurs in the ar5523 cmd function when it times out. The actual impact and likelihood of an attack have not been confirmed. Recommendatio...

PT-2023-33671

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A potential issue exists where a use-after-free error occurs in the ar5523 cmd function when it times out. The actual impact and likelihood of an attack have not been confirmed. Recommendation...