jenkins: remote code execution flaw (SECURITY-150)

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

Cisco IOS XR Software Information Disclosure Vulnerability

A vulnerability in the command-line interface CLI of Cisco IOS XR Software could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to insufficient data protection of sensitive information. An attacker could exploit this vulnerability by issuing...

Katello: CLI - user without access can call "system remove_deletion" command

Katello allows remote authenticated users to call the "system removedeletion" CLI command via vectors related to "remove system" permissions...

Directory traversal

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

CVE-2013-6975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

PT-2014-3238

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description A directory traversal issue in the command-line interface allows local users to read arbitrary files via unspecified input. Recommendations For Cisco NX-OS versions 6.22a and earlier, at the...

Cisco TelePresence TC and TE Software u-boot Buffer Overflow Vulnerability

A vulnerability in the implementation of executable utilities that use the universal bootloader u-boot compiler of Cisco TelePresence TC and TE Software could allow an authenticated, local attacker to create a buffer overflow and possibly execute arbitrary code on the affected system. The...

CVE-2013-6990

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

Design/Logic Flaw

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

CVE-2013-6990

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

CVE-2013-6990: Undefined Security Weakness

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

PT-2014-3240

Name of the Vulnerable Software and Affected Versions FortiGuard FortiAuthenticator versions prior to 3.0 Description The issue allows remote administrators to gain privileges via the command line interface. Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the...

PT-2014-4781

Name of the Vulnerable Software and Affected Versions Blue Coat Content Analysis System CAS versions 1.1 through 1.1.4.1 Description The command-line interface in the affected system allows remote administrators to execute arbitrary commands via unspecified vectors, related to command injection...

dompdf 0.6.0 - dompdf.php?read Arbitrary File Read

dompdf 0.6.0 - dompdf.php?read Arbitrary File Read Vulnerability title: Arbitrary file read in dompdf CVE: CVE-2014-2383 Vendor: dompdf Product: dompdf Affected version: v0.6.0 Fixed version: v0.6.1 partial fix Reported by: Alejo Murillo Moyas Details: An arbitrary file read vulnerability is...

Cisco Unified Computing System Central Software Privilege Escalation Vulnerability

A vulnerability in the local-mgmt context in Cisco Unified Computing System Central Software could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the copy command. An attacker could exploit this...

Cisco UCS Director Software Has Default Credentials Open to Attackers

Cisco’s UCS Director infrastructure management product contains a set of default credentials that any remote attacker can exploit to take complete control of any vulnerable machine. The flaw is in UCS Director versions 4.0.0.2 and below. The Cisco UCS Director software is designed to allow...

[IE Password Decryptor] Internet Explorer Password Recovery Tool

IE Password Decryptor is the FREE software to quickly and easily recover all the stored passwords from Internet Explorer. It automatically detects the installed IE version and use appropriate technique to successfully decrypt all the stored passwords. It can recover passwords from all versions of...

Cisco NX-OS Arbitrary File Access Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to access arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the tar...

Cisco NX-OS Directory Traversal Vulnerability

A vulnerability in the Command Line Interface CLI of the Cisco NX-OS Software could allow an authenticated, local attacker to delete arbitrary files on the device. The vulnerability is due to improper filtering of user input. An attacker could exploit this vulnerability by leveraging the filesys...

CVE-2012-4112

The Baseboard Management Controller BMC in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary commands via crafted command parameters within the command-line interface, aka Bug ID CSCtr43330...