Lucene search
K

94 matches found

BDU FSTEC
BDU FSTEC
added 2024/02/07 12:0 a.m.1 views

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

8.3CVSS7.5AI score0.00176EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/01/10 12:0 a.m.1 views

The vulnerability of the QNAP QVR surveillance system arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the QNAP QVR video surveillance system exists due to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS8.2AI score0.86746EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:0 a.m.1 views

The vulnerability of the flupl query_type function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the flupl querytype function in D-Link G416 router microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

8.8CVSS8.1AI score0.01705EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:0 a.m.1 views

The vulnerability of the cfgsave upusb function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cfgsave upusb function in D-Link G416 microprogrammed routers lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting to port 80...

8.8CVSS8.1AI score0.02451EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:0 a.m.1 views

The vulnerability of the remote control function of the PowerStation load balancing system allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the remote control function of the PowerStation network load balancing system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands ...

9CVSS8AI score0.00731EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.1 views

The vulnerability of the FileDialog.aspx component in the mojoPortal content management system allows a hacker to execute XSS attacks.

The vulnerability of the FileDialog.aspx component in the mojoPortal content management system exists because measures to neutralize special elements used in the operating system command have not been implemented. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

6.4CVSS6.4AI score0.46477EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/08 12:0 a.m.1 views

The vulnerability of the ML lifecycle management platform arises from the lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary commands or trigger service failures.

The vulnerability of the MLflow model lifecycle management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands or cause service failures...

8.8CVSS7.7AI score0.00182EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.1 views

The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary code.

The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

8.3CVSS7.5AI score0.0087EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/06/30 12:0 a.m.1 views

The vulnerability of the account_operator.cgi file in the microprogramming software for ZyXEL USG FLEX and VPN devices allows a hacker to alter the device’s configuration data and trigger a service failure.

The vulnerability of the accountoperator.cgi file in the ZyXEL USG FLEX and VPN networking devices relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to remotely alter the device’s...

10CVSS7.8AI score0.00674EPSS
Exploits0References2Affected Software11
BDU FSTEC
BDU FSTEC
added 2023/06/20 12:0 a.m.2 views

The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary code.

The vulnerability of the microprogrammed software for Zyxel NAS326, NAS540, and NAS542 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

10CVSS8.5AI score0.86532EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:0 a.m.1 views

The vulnerability of D-Link DIR-846 router’s microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system command. This allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR-846 router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.5AI score0.03227EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/02 12:0 a.m.2 views

The vulnerability of the FortiADC application delivery controller and the FortiDDoS/FortiDDoS-F software and hardware protection devices relates to the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerabilities of the FortiADC application delivery controller and the FortiDDoS/FortiDDoS systems for DDoS attacks are related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting these vulnerabilities allows a remote attacker t...

7.8CVSS7.6AI score0.00279EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/04/11 12:0 a.m.1 views

The vulnerabilities of the closed software environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, the Cisco Prime Infrastructure – systems for monitoring and managing network equipment – allow attackers to escalate their privileges.

The vulnerability of the closed-programming environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, and the Cisco Prime Infrastructure system for network monitoring and management exists due to the lack of measures taken to neutralize special elements used i...

7.8CVSS6.6AI score0.00295EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/04/11 12:0 a.m.1 views

The vulnerability of Cisco IOS XE operating systems on Cisco Catalyst 9300 switches arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Cisco IOS XE-enabled Cisco Catalyst 9300 switches exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

6.6CVSS7AI score0.00221EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/14 12:0 a.m.1 views

The vulnerability of FortiWeb web applications’ network firewalls arises from the failure to take measures to neutralize special elements used in the operating system’s command line. This allows attackers to execute arbitrary code with root user privileges.

The vulnerability of FortiWeb web applications’ network firewalls exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges by sending...

9CVSS8.1AI score0.01317EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.1 views

The vulnerability of the application for blocking advertisements and Pi-hole internet trackers arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a violator to execute arbitrary code.

The vulnerability of the Pi-hole ad blocking app exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.1AI score0.90775EPSS
Exploits13References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.1 views

The vulnerability of the ArubaOS operating systems arises from the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability of the ArubaOS operating systems exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.5AI score0.01041EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.1 views

The vulnerability of the QTS and QuTS operating systems lies in the lack of measures to neutralize special elements used in the operating system’s commands, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS and QuTS operating systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a special HTTP request...

10CVSS8.2AI score0.83958EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.1 views

The vulnerability of the command-line interface (CLI) implementation of Zyxel networking devices allows a perpetrator to execute arbitrary commands.

The vulnerability of CLI implementations for Zyxel network devices involves a lack of measures to neutralize special elements used in OS commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

8.3CVSS7.4AI score0.01466EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.1 views

The vulnerability of the Dell EMC Data Domain Operating System (DD OS) arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Dell EMC Data Domain Operating System DD OS is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary...

9CVSS7.9AI score0.03652EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder