2177 matches found
CVE-2019-6013
DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...
CVE-2019-6013
DBA-1510P firmware 1.70b009 and earlier allows authenticated attackers to execute arbitrary OS commands via Command Line Interface CLI...
PT-2019-4331
Name of the Vulnerable Software and Affected Versions DBA-1510P firmware version 1.70b009 and earlier Description The issue allows authenticated attackers to execute arbitrary OS commands via the Command Line Interface CLI. This is due to the lack of measures to neutralize special elements used i...
Cisco TelePresence Collaboration Endpoint CLI Privilege Escalation
The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint CE and Cisco TelePresence Codec TC devices is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain increased...
Cisco Wireless LAN Controller CLI Unauthorized Access
The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Cisco TelePresence Collaboration Endpoint CLI Arbitrary File Write
The vulnerability of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software is related to improper handling of permissions. Exploiting this vulnerability could allow an attacker to write arbitrary files into the root directory...
CVE-2019-15997
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI...
CVE-2019-15986
A vulnerability in the CLI of Cisco Unity Express could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. To exploit this vulnerability, an attacker would need valid administrator credentials. The vulnerability is due to improper input...
PT-2019-5284
Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.8.6 Ansible versions prior to 2.7.14 Ansible versions prior to 2.6.20 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow a remote...
[SECURITY] Fedora 29 Update: koji-1.19.1-1.fc29
Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...
POC-T
This is a Python-based penetration testing framework called POC-T. It is a concurrent framework that allows users to perform various types of attacks, including vulnerability verification, file upload, weak password cracking, and more. The framework has a modular design, with each module...
Cisco TelePresence Collaboration Endpoint CLI Code Execution
The vulnerability of the command-line interface CLI of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code with root privileges by sending...
Cisco TelePresence Collaboration Endpoint CLI Data Compromise
The multiple vulnerabilities of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software exist due to insufficient validation of input data. Exploitation of these vulnerabilities could allow attackers to compromise the integrity of protected...
AtomShields Cli - Security Testing Framework For Repositories And Source Code
AtomShields Cli is a Command-Line Interface to use the software AtomShields Installation pip install atomshieldscli Basic usage ascli --target --name The allowed action values are: install : To install a checker or a report, depending the context setted. uninstall : To uninstall a checker or a...
Cisco Firepower Threat Defense CLI Command Execution Root Privilege
The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the base operating system with root privileges...
Cisco TelePresence Collaboration Endpoint CLI Arbitrary Command Execution
The vulnerability of the command-line interface CLI of Cisco TelePresence Collaboration Endpoint CE software relates to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...
[SECURITY] Fedora 30 Update: koji-1.18.1-1.fc30
Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...
ansible: Incomplete fix for CVE-2019-10206
The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with th...
Cisco Firepower Threat Defense Input Validation Error Vulnerability
Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An input validation error vulnerability exists in the CLI in Cisco FTD. A local attacker could exploit this vulnerability to execute commands with...