Lucene search
+L

9462 matches found

UbuntuCve
UbuntuCve
•added 2024/03/05 8:15 a.m.•17 views

CVE-2024-26333

swftools v0.9.2 was discovered to contain a segmentation violation via the function freelines at swftools/lib/modules/swfshape.c...

5.5CVSS5.9AI score0.00275EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/03/05 12:00 a.m.•18 views

Aruba EdgeConnect Enterprise Command Line Code Execution

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8AI score0.01037EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•5 views

CVE-2024-25612: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS6.3AI score0.0124EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•29 views

Aruba Networks ArubaOS Security Vulnerabilities

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including Mobility Controllers and Mobility Access Switches from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that stems from an arbitrary file deletion vulnerability in the CLI use...

9.1CVSS7AI score0.00512EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•5 views

CVE-2024-1356: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS6.3AI score0.0124EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•7 views

CVE-2024-25613: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS6.3AI score0.0124EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•4 views

CVE-2024-25611: Improper Neutralization of Special Elements used in a Command

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS6.3AI score0.0124EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•32 views

Aruba Networks ArubaOS Security Vulnerabilities

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from an authenticated command injection vulnerability...

7.2CVSS7.4AI score0.0124EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•25 views

Aruba Networks ArubaOS Security Vulnerabilities

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from an authenticated command injection vulnerability...

7.2CVSS7.4AI score0.0124EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/05 12:00 a.m.•12 views

PT-2024-2221 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to the command line interface of ArubaOS, where a lack of proper sanitization of special elements used in operating system commands can be exploited. This allows a remo...

8.3CVSS7.8AI score0.0124EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•30 views

Aruba Networks ArubaOS Security Vulnerabilities

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from an authenticated command injection vulnerability...

7.2CVSS7.4AI score0.0124EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/02 12:00 a.m.•36 views

Fedora: Security Advisory for gifsicle (FEDORA-2024-4672c1ff2d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.00373EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2024/03/02 12:00 a.m.•25 views

Fedora: Security Advisory (FEDORA-2024-5e50570506)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.00373EPSS
SaveExploits2References6
osv_ghsa
osv_ghsa
•added 2024/03/01 8:09 p.m.•120 views

GHSA-8P25-3Q46-8Q2P ESPHome vulnerable to remote code execution via arbitrary file write

Summary Security misconfiguration in edit configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation allows authenticated remote attackers to read and write arbitrary files under the configuration directory rendering remote code execution possible. Detail...

7.2CVSS8.7AI score0.01535EPSS
SaveExploits1References4
Fedora
Fedora
•added 2024/03/01 1:40 a.m.•36 views

[SECURITY] Fedora 38 Update: gifsicle-1.95-1.fc38

Gifsicle is a command-line tool for creating, editing, and getting information about GIF images and animations. Some more gifsicle features: Batch mode for changing GIFs in place. Prints detailed information about GIFs, including comments. Control over interlacing, comments, looping,...

7.8CVSS6.8AI score0.00373EPSS
SaveExploits2
Fedora
Fedora
•added 2024/03/01 1:09 a.m.•54 views

[SECURITY] Fedora 39 Update: gifsicle-1.95-1.fc39

Gifsicle is a command-line tool for creating, editing, and getting information about GIF images and animations. Some more gifsicle features: Batch mode for changing GIFs in place. Prints detailed information about GIFs, including comments. Control over interlacing, comments, looping,...

7.8CVSS6.8AI score0.00373EPSS
SaveExploits2
Debian CVE
Debian CVE
•added 2024/02/28 8:13 a.m.•55 views

CVE-2021-46997

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: always set GICPRIOPSRISET during entry Zenghui reports that booting a kernel with "irqchip.gicv3pseudonmi=1" on the command line hits a warning during kernel entry, due to the way we manipulate the PMR. Early in the...

5.5CVSS4.9AI score0.00246EPSS
SaveExploits0
Fedora
Fedora
•added 2024/02/27 1:45 a.m.•39 views

[SECURITY] Fedora 38 Update: libxls-1.6.2-14.fc38

This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...

6.5CVSS6.5AI score0.01329EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2024/02/26 4:27 p.m.•37 views

CVE-2024-25760

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.8AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2024/02/26 2:34 a.m.•359 views

Exploit for Injection in Atlassian Confluence_Data_Center

Project Introduction This project refers to the project of B...

10CVSS8.3AI score0.99984EPSS
SaveExploits37
Rows per page
Query Builder