CVE-2024-39712: Improper Neutralization of Argument Delimiters in a Command

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-38655: Improper Neutralization of Argument Delimiters in a Command

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39710: Improper Neutralization of Argument Delimiters in a Command

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-39711: Improper Neutralization of Argument Delimiters in a Command

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-38656: Improper Neutralization of Argument Delimiters in a Command

Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-35307: Improper Neutralization of Argument Delimiters in a Command

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through 777...

CVE-2024-3367: Improper Neutralization of Argument Delimiters in a Command

Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

CVE-2023-39288

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploi...

PT-2023-26869

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect versions through 19.3 SP3 22.24.5800.0 Description A vulnerability in the Edge Gateway component could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument...

PT-2023-26870

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect versions through 9.6.2304.102 Description A vulnerability in the Connect Mobility Router component could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument...

CVE-2023-39288: Improper Neutralization of Argument Delimiters in a Command

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploi...

CVE-2023-39287: Improper Neutralization of Argument Delimiters in a Command

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...

CVE-2022-4864: Improper Neutralization of Argument Delimiters in a Command

Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

PT-2021-18730

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 8.1.19 PAN-OS versions prior to 9.0.14 PAN-OS versions prior to 9.1.10 Description An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to...

PT-2021-21119

Name of the Vulnerable Software and Affected Versions: Echo ShareCare version 8.15.5 Description: An issue was discovered in the UnzipFile feature, specifically in Access/EligFeedParse Sup/UnzipFile Upd.cfm, which is susceptible to a command argument injection vulnerability. This occurs when...

CVE-2021-36122: Improper Neutralization of Argument Delimiters in a Command

An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParseSup/UnzipFileUpd.cfm is susceptible to a command argument injection vulnerability when processing remote input in the zippass parameter from an authenticated user, leading to the ability to inject...

CVE-2010-1423: Improper Neutralization of Special Elements used in an OS Command

Argument injection vulnerability in the URI handler in a Java NPAPI plugin and b Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the 1 -J or 2 -XXaltjvm argument to javaws.exe...

CVE-2009-4025: Improper Neutralization of Special Elements used in an OS Command

Argument injection vulnerability in the traceroute function in Traceroute.php in the NetTraceroute package before 0.21.2 for PEAR allows remote attackers to execute arbitrary shell commands via the host parameter. NOTE: some of these details are obtained from third party information...