8252 matches found
The vulnerability of Adobe Dreamweaver’s HTML editor arises from the lack of measures taken to eliminate special elements used in the operating system command line. This allows attackers to execute arbitrary code.
The vulnerability of Adobe Dreamweaver exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by sending a specially created malicious file...
PT-2024-37955 · Zowe Cli · Zowe Cli
Name of the Vulnerable Software and Affected Versions: Zowe CLI affected versions not specified Description: A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a terminal using the '--show-inputs-only' flag. Recommendations: At th...
age Plugins
age is a file encryption tool, library, and format. It lets you encrypt files to “recipients” and decrypt them with “identities”. $ age-keygen -o key.txt Public key: age1ql3z7hjy54pw3hyww5ayyfg7zqgvc7w3j2elw8zmrj2kg5sfn9aqmcac8p $ tar cvz /data | age -r...
PT-2024-5455 · Cisco · Cisco Secure Web Appliance +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Web Appliance versions affected versions not specified Description: The issue is related to insufficient validation of user-supplied input for the Command Line Interface CLI of Cisco AsyncOS for Secure Web Appliance. This could...
[SECURITY] Fedora 39 Update: yt-dlp-2024.07.09-1.fc39
yt-dlp is a command-line program to download videos from many different online video platforms, such as youtube.com. The project is a fork of youtube-dl with additional features and fixes...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-284_48_1 security update
An update for kpatch-patch-5140-284481 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
How to Move a XenServer Pool to a Different IP Subnet
This article describes how to change the IP subnet assigned to the management network on a XenServer pool. This procedure is long compared to changing the IP address while staying in the same subnet. Requirements Working knowledge of XenServer and XenCenter and basic knowledge of the Command Line...
SDX Mapping of Virtual Interfaces on VPX to Physical Interface and ethX port Mapping
This article provides information about how to discover the NetScaler SDX mapping of Virtual Interfaces on VPX to physical interface and ethX port mapping. SDX Mapping of Virtual Interfaces on VPX to Physical Interface and ethX port mapping To know the mappings from GUI, navigate to Configuration...
How to Mount a CIFS (Windows File System) Share in XenServer Using the Command Line Interface
This article describes how to mount a CIFS Windows file system share in XenServer using the Command Line Interface CLI. Requirements Basic knowledge of Linux Administrator root access to XenServer host using the Command Line Interface CLI Windows username and password to access Windows share to b...
How to Mount and Unmount a vDisk Version from the Command Line Interface
This article describes how to mount or unmount a vDisk version from the Command Line Interface. Background CVhdMount utility is used to mount and unmount a vDisk version...
How to Create an ISO Storage Repository by Using a CIFS Share with NTLMv2 Authentication Enabled
This article describes how to create an ISO Storage Repository by using a CIFS share with NTLMv2 authentication enabled. When Group Policy Object GPO of the Windows domain enforces NTLMv2 authentication, you are unable to create the ISO Storage Repository by using XenCenter. The following procedu...
Changing Farms Using the CHFARM Utility
This article provides guidelines and alternate references for the use of Change Farm command CHFARM within a Citrix environment. CHFARM Usage The CHFARM utility is used to change the farm membership of a Citrix Server. Background You can use the command line CHFARM when you want to modify the far...
The vulnerability of the yt-dlp download utility lies in its lack of measures to neutralize special elements used in the operating system’s command line, allowing a violator to execute arbitrary code.
The vulnerability of the YouTube-DLP download utility exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Number withdrawn
LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. This CVE number has been withdrawn...
CVE-2024-39521
An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...
PT-2024-5356 · Juniper Networks · Junos Evolved
Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S6-EVO Junos OS Evolved versions 21.2-EVO prior to 21.2R3-S4-EVO Junos OS Evolved versions 21.4-EVO prior to 21.4R3-S6-EVO Junos OS Evolved versions 22.2-EVO prior to 22.2R2-S1-EVO Junos OS Evolved...
Juniper Networks Junos OS Security Vulnerability
Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that stems from the presence of an...
CVE-2024-39698
electron-updater allows for automatic updates for Electron apps. The file packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts implements the signature validation routine for Electron applications on Windows. Because of the surrounding shell, a first pass by cmd.exe expands any...
CVE-2024-39698
The CVE-2024-39698 entry concerns a Windows code-signing bypass in electron-updater. A flaw in the verification routine in packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts arises because the surrounding shell (cmd.exe) expands environment variables in the command line, enab...