Lucene search
K

1775 matches found

NVD
NVD
added 2024/12/19 11:15 a.m.12 views

CVE-2021-26115

An OS command injection CWE-78 vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection CWE-78 vulnerability in FortiWA...

7.8CVSS0.00788EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/19 10:57 a.m.19 views

CVE-2021-26115

An OS command injection CWE-78 vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection CWE-78 vulnerability in FortiWA...

7.8CVSS0.00788EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Azure Service Connector allows a perpetrator to escalate their privileges.

The vulnerability of the Command Line Interface CLI of the Azure Service Connector relates to the lack of data cleansing measures at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

8.7CVSS5.4AI score0.01609EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2024/12/13 12:0 a.m.4 views

CVE-2024-52308

...

9.6CVSS7.7AI score0.00861EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

10CVSS8.5AI score0.01979EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

9CVSS8.5AI score0.014EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:0 a.m.3 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acces...

6.8CVSS8AI score0.00893EPSS
Exploits0References4Affected Software2
CNNVD
CNNVD
added 2024/11/29 12:0 a.m.3 views

veraPDF-library 代码问题漏洞

veraPDF-library is veraPDF open source an open source PDF/A validation library . A code issue vulnerability exists in veraPDF-library, which stems from the fact that using a custom schematron file enforcement policy check via the CLI invokes an XSL transformation, which could theoretically lead t...

2.3CVSS7.6AI score0.01063EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.1 views

The vulnerability of the CLI command-line interface of the GitHub collaborative development platform, related to the failure to remove special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the CLI command-line interface of the GitHub collaborative development platform is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS8.1AI score0.00861EPSS
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2024/11/25 11:45 p.m.1 views

@litcore/cli (>=1.0.1 <=1.0.2) potentially affected by unknown CVE via litcore (=0.0.1-security)

litcore NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on litcore and may be impacted: - @litcore/cli =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2024-10936...

5.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software, as well as the FortiAnalyzer and FortiAnalyzer-BigData security event monitoring and analysis tools, allows a malicious actor to delete arbitrary files from the file system.

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software, as well as the FortiAnalyzer and FortiAnalyzer-BigData event monitoring and analysis tools, is related to errors in processing the relative path to the directory. Exploiting this...

5.2CVSS5.4AI score0.00238EPSS
Exploits0References3Affected Software3
OSV
OSV
added 2024/11/19 3:32 p.m.5 views

CVE-2024-52582 cachi2 allows traceback prints locals

Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...

4.7CVSS6.8AI score0.00179EPSS
Exploits0References5
OSV
OSV
added 2024/11/15 4:15 p.m.2 views

CVE-2023-20092

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

4.4CVSS6AI score0.00192EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.3 views

PT-2024-8519 · Fortinet · Fortimanager +2

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5 Fortinet FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5 Fortinet FortiAnalyzer-BigData before 7.4.0 Description: The issue is related to improper neutralization ...

6.8CVSS7.6AI score0.00608EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.4 views

PT-2024-24120 · Fortinet · Fortimanager +2

Name of the Vulnerable Software and Affected Versions: FortiManager versions 7.4.0 through 7.4.2 and before 7.2.5 FortiAnalyzer versions 7.4.0 through 7.4.2 and before 7.2.5 FortiAnalyzer-BigData versions 7.4.0 and before 7.2.7 Description: A stack-based buffer overflow issue allows a privileged...

6.8CVSS8.2AI score0.00229EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.3 views

PT-2024-8518 · Fortinet · Fortimanager +2

Name of the Vulnerable Software and Affected Versions: FortiManager versions 7.4.0 through 7.4.2 and prior to 7.2.5 FortiAnalyzer versions 7.4.0 through 7.4.2 and prior to 7.2.5 FortiAnalyzer-BigData versions 7.4.0 and prior to 7.2.7 Description: The issue is related to errors in handling relativ...

6CVSS7.3AI score0.00238EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/11/07 12:0 a.m.7 views

Juniper Junos OS Vulnerability (JSA88106)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88106 advisory. - An Incorrect Default Permissions vulnerability in the command line interface CLI of Juniper Networks Junos OS Evolved allows a low privileged local attacker to view NETCON...

5.1CVSS6AI score0.00198EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/06 12:0 a.m.7 views

Juniper Junos OS Vulnerability (JSA88104)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88104 advisory. - An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface CLI of Juniper Networks Junos OS on SRX Series devices allows a...

6.8CVSS5.9AI score0.00232EPSS
Exploits0References2
NVD
NVD
added 2024/11/05 11:15 p.m.7 views

CVE-2024-47463

An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful exploitation of this vulnerability could allow an authenticated remote attacker to create arbitrary files, which could lead to a remote command execution RCE on the underlying...

7.2CVSS0.01161EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/05 11:2 p.m.10 views

CVE-2024-47464 Authenticated Path Traversal Vulnerability Leads to a Remote Unauthorized Access to Files

An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote...

6.8CVSS6.9AI score0.00893EPSS
Exploits0References1
Rows per page
Query Builder