1885 matches found
Sharp Digital Full-color Multifunctional System 命令注入漏洞
The Sharp Digital Full-color Multifunctional System is a series of digital full-color multifunctional printers from Sharp, Japan. A command injection vulnerability exists in the Sharp Digital Full-color Multifunctional System, which is not properly protected with a strong administrator password a...
CVE-2022-45796 SHARP Multifunction Printer - Command Injection
Command injection vulnerability in nwinterface.html in SHARP multifunction printers MFPs's Digital Full-color Multifunctional System 202 or earlier, 120 or earlier, 600 or earlier, 121 or earlier, 500 or earlier, 402 or earlier, 790 or earlier, and Digital Multifunctional System Monochrome 200 or...
CVE-2022-46634
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function...
CVE-2022-44832
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
D-Link DIR-3040 命令注入漏洞
D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...
CVE-2022-45497
Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...
CVE-2022-44928
D-Link DVG-G5402SP GE1.03 was discovered to contain a command injection vulnerability via the Maintenance function...
Dell PowerPath Management Appliance 操作系统命令注入漏洞
The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. A command injection vulnerability exists in Dell PowerPath Management Appliance versions 3.3, 3.2, 3.1,...
CVE-2022-40881
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via networktest.php...
CVE-2022-42053
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a command injection vulnerability via the PortMappingServer parameter in the setPortMapping function...
CVE-2022-41395
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a command injection vulnerability via the dmzHost parameter in the setDMZ function...
CVE-2022-40847
The CVE-2022-40847 vulnerability affects the Tenda AC1200 Router, model W15Ev2, version V15.11.0.10(1576). The issue is a command injection in the function formSetFixTools, allowing an attacker to execute arbitrary commands on the device via the hostname parameter. Publicly documented impact indi...
CVE-2022-42053
Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a command injection vulnerability via the PortMappingServer parameter in the setPortMapping function...
Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote attacker due to Node.js module moment-timezone (IBM X-Force ID: 237819)
Summary IBM App Connect Enterprise is vulnerable to a remote attacker due to Node.js module moment-timezone IBM X-Force ID: 237819. The fix includes a version of moment-timezone 0.5.35 Vulnerability Details IBM X-Force ID: 237819 DESCRIPTION: Node.js moment-timezone module could allow a remote...
CVE-2022-43109
D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet...
PT-2022-24147 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute...
CVE-2022-43367
IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the formSetDebugCfg function...
Abode Systems, Inc. iota All-In-One Security Kit web interface util_set_serial_mac OS command injection vulnerability
Talos Vulnerability Report TALOS-2022-1566 Abode Systems, Inc. iota All-In-One Security Kit web interface utilsetserialmac OS command injection vulnerability October 20, 2022 CVE Number CVE-2022-29472 SUMMARY An OS command injection vulnerability exists in the web interface utilsetserialmac...
CVE-2022-42156
D-Link COVR 1200/1202/1203 v1.08 exposes a command-injection in SetNetworkTomographySettings via the tomography_ping_number parameter. The vulnerability originates from insufficient data sanitization at the management level, enabling a remote attacker to execute arbitrary commands. Reported impac...