EulerOS 2.0 SP12 : vim (EulerOS-SA-2024-2793)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack...

Custom application fails to launch when the command line exceeds 203 characters

Custom application fails to launch when the command line exceeds 203 characters. Application appears to launch and then disappears...

The vulnerability of the command-line interface of the microprogramming software for Cisco Analog Telephone Adapter (ATA) series 190 allows a perpetrator to execute arbitrary commands.

The vulnerability of the command-line interface of microprogramming software for Cisco Analog Telephone Adapter ATA series 190 devices exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an...

Fortinet FortiWeb Stack-based buffer overflow in command line interpreter (FG-IR-21-132)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-132 advisory. - Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated...

The vulnerability of Firefox’s command-line interface for browsing, accessing bookmarks, and viewing history is related to the creation of temporary files with insecure permissions. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of Firefox’s command-line interface for reading, viewing bookmarks, and accessing history is related to the creation of temporary files with insecure permissions in the /tmp directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the command-line interface of Cisco Firepower Threat Defense (FTD) software allows a malicious actor to gain unauthorized access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the command-line interface of Cisco Firepower Threat Defense FTD microprogramming systems is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or cause servic...

Fortinet Fortigate Buffer overflow in TFTP client library of CLI (FG-IR-21-173)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-173 advisory. - A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an...

Fortinet Fortigate Format string vulnerability in command line interpreter (FG-IR-21-235)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-235 advisory. - A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC...

Fortinet Fortigate ] Sensitive information is displayed in cleartext in the CLI window when using diagnose sys ha checksum command (FG-IR-20-009)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-009 advisory. - A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier...

[SECURITY] Fedora 39 Update: koji-1.35.1-1.fc39

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

The vulnerability of the PFE (evo-pfemand) control demon in JunOS Evolved operating systems allows a intruder to trigger a service failure.

The vulnerability of the PFE evo-pfemand control demon for JunOS Evolved is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures by executing arbitrary commands through the command line interface, or by sending...

The vulnerability of the command-line interface (CLI) of the Junos OS Evolved router operating system, allowing a attacker to cause a service failure

The vulnerability of the command-line interface CLI of the Junos OS Evolved router operating system QFX5000, where resources are not properly cleaned or released. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Zyxel USG FLEX 安全漏洞

Zyxel USG FLEX is a firewall from China Hopkins Zyxel. Offering flexible VPN options IPsec, SSL or L2TP, it provides flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel USG FLEX that stems from inadequate protection against credentials in CLI...

The vulnerability of the PowerShell command line interface on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PowerShell command line interface on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Microsoft Azure Command Line Integration CLI is a cross-platform command line tool from Microsoft USA that connects to Azure and executes management commands on Azure resources. Microsoft Azure Command Line Integration CLI suffers from an elevation of privilege vulnerability that is caused by a...

CVE-2024-20461

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root user. This vulnerability exists because CLI input is not properly sanitized. An attacker could exploit...

"An Account is not Configured" Displayed On Startup when AllowAddStore is set to N in Registry

Citrix Workspace app for Windows is being configured via command line arguments and then launched programmatically The following error is displayed: An Account is not Configured. Please contact your administrator...

The vulnerability of Visual Studio Code’s source editor lies in its failure to properly eliminate special elements used in operating system commands, allowing attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Arbitrary Argument Injection

ggit is vulnerable to Arbitrary Argument Injection. The vulnerability is due to the failure to sanitize user input and improper handling of command-line flags and doesn't validate the URL scheme or properly pass arguments to the git binary using the necessary -- POSIX characters, allowing attacke...

CVE-2024-9916

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The attack may be launched remotely. The...