CVE-2023-22790: Improper Neutralization of Special Elements used in a Command

Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

Cisco Catalyst SD-WAN Manager File Deletion

The vulnerability of the command-line interface of the Cisco Catalyst SD-WAN Manager arises due to an input validation error during the processing of directory traversal sequences. Exploiting this vulnerability allows an attacker to send specially crafted HTTP requests and delete arbitrary files...

CVE-2023-27993

A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...

CVE-2023-27993

Summary: CVE-2023-27993 is a Fortinet FortiADC vulnerability describing a relative path traversal (CWE-23) that could let a privileged attacker delete arbitrary directories via crafted CLI commands. Affected software: FortiADC versions 7.2.0 and prior to 7.1.1. Root cause / impact: Presence of a ...

Fortinet FortiADC 路径遍历漏洞

Fortinet FortiADC is an application delivery controller from Fortinet. A security vulnerability exists in FortiADC version 7.2.0 and versions prior to 7.1.1 that stems from the presence of a relative path traversal, which allows a privileged attacker to remove arbitrary directories from the...

Cisco Aironet Access Point CLI Command Execution

The vulnerability of the command-line interface CLI of Cisco Aironet Access Point microprogramming software exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow an attacker to execute arbitrary...

PT-2023-22116 · Xcc · Xcc

Name of the Vulnerable Software and Affected Versions: XCC affected versions not specified Description: A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is...

CVE-2023-2273

Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write...

Fedora: Security Advisory for doctl (FEDORA-2023-3737bc1c0a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: doctl-1.93.1-2.fc37

The official command line interface for the DigitalOcean API...

CVE-2023-28980

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service DoS. In a rib sharding scenario the rpd process will crash shortly after specific CLI command is...

Cisco Aironet Access Point CLI Privilege Escalation

The vulnerability of the command-line interface CLI of Cisco Aironet Access Point software exists because measures to neutralize special elements used in operating system commands have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root...

Jenkins: Temporary file parameter created with insecure permissions

A flaw was found in Jenkins. When triggering a build from the Jenkins CLI, Jenkins creates a temporary file on the controller if a file parameter is provided through the CLI’s standard input. Affected versions of Jenkins create this temporary file in the default temporary directory with the defau...

Siemens SCALANCE W1750D Command Injection (CVE-2022-37893)

An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x...

Siemens SCALANCE Missing Encryption of Sensitive Data (CVE-2021-37731)

A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address...

Siemens SCALANCE Command Line Arbitrary Command Execution

The vulnerability of the command-line interface of Siemens SCALANCE industrial switches exists due to the lack of measures taken to protect the command-line interface. Exploitation of this vulnerability allows a malicious actor to execute arbitrary commands remotely...

[SECURITY] Fedora 37 Update: rubygem-railties-7.0.4.3-1.fc37

Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core;...

ArubaOS Command Line Arbitrary Command Execution

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ArubaOS Command Line Session Continuation

The vulnerability of the command-line interface of ArubaOS systems is related to incorrect session duration settings. Exploiting this vulnerability allows a remote attacker to continue the session on a vulnerable device after deleting the affected account...

ArubaOS Command Line Unauthorized Access

The vulnerability of the command-line interface of ArubaOS systems is related to deficiencies in the segmentation of the controlled system area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...