Lucene search
+L

8258 matches found

RedHat Linux
RedHat Linux
added 2023/06/05 11:46 a.m.21 views

curl: HSTS ignored on multiple requests

A flaw was found in the Curl package, where the HSTS mechanism would be ignored by subsequent transfers when done on the same command line because the state would not be properly carried. This issue may result in limited confidentiality and integrity...

9.1CVSS6.8AI score0.00858EPSS
SaveExploits1References5
Fedora
Fedora
added 2023/06/03 2:46 a.m.63 views

[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.11-1.fc38

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

9.8CVSS7AI score0.08011EPSS
SaveExploits5
ATTACKERKB
ATTACKERKB
added 2023/06/02 8:15 a.m.10 views

CVE-2023-3000

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602...

9.8CVSS7.4AI score0.00799EPSS
SaveExploits0References3
Prion
Prion
added 2023/06/02 8:15 a.m.17 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass.This issue affects ErMon: before 230602...

7.5CVSS9.8AI score0.00799EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/06/02 7:52 a.m.40 views

CVE-2023-3000

CVE-2023-3000 affects Erikoglu Technology ErMon prior to 230602 due to improper neutralization of special elements in SQL commands, causing a SQL Injection with potential command‑line execution and authentication bypass. Affected component: ErMon (pre‑230602). Reported CVSSv3.1: 9.8 (Network, Low...

9.8CVSS7.4AI score0.00799EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/02 7:52 a.m.17 views

CVE-2023-3000 SQLi in Erikoglu Technology's ErMon

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602...

9.8CVSS10AI score0.00799EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/02 12:00 a.m.11 views

Silicon Labs Gecko SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK v4.2.1 and prior versions, which stems from a...

3.3CVSS5.3AI score0.00249EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/06/02 12:00 a.m.9 views

The vulnerability of the command-line interface (CLI) of the Cisco Email Security Appliance allows a perpetrator to execute arbitrary commands.

The vulnerability of the command-line interface CLI of the Cisco Email Security Appliance relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

6CVSS7.3AI score0.00447EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/02 12:00 a.m.8 views

PT-2023-22511

Name of the Vulnerable Software and Affected Versions Erikoglu Technology ErMon versions prior to 230602 Description The issue is related to an SQL Injection vulnerability, allowing for Command Line Execution and Authentication Bypass. This is due to the improper neutralization of special element...

9.8CVSS7.4AI score0.00799EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.9 views

The vulnerability of the command-line interface (CLI) of Cisco NX-OS and Cisco FXOS routers of Cisco UCS Fabric Interconnect allows a attacker to execute arbitrary code.

The vulnerability of the command-line interface CLI of Cisco NX-OS and Cisco FXOS router operating systems from Cisco UCS Fabric Interconnect is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges on the...

7.8CVSS7.6AI score0.00427EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/29 12:00 a.m.13 views

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute...

8.3CVSS8AI score0.0108EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2023/05/28 12:00 a.m.12 views

Fedora: Security Advisory for rust-sequoia-sq (FEDORA-2023-1d0d71b6aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2023/05/27 1:26 a.m.16 views

[SECURITY] Fedora 37 Update: rust-sequoia-sq-0.26.0-8.fc37

Command-line frontends for Sequoia...

7.1AI score
SaveExploits0
NVD
NVD
added 2023/05/25 2:15 p.m.22 views

CVE-2023-2851

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned...

9.8CVSS9.9AI score0.00706EPSS
SaveExploits0References2
Prion
Prion
added 2023/05/25 2:15 p.m.14 views

Sql injection

UNSUPPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection.This issue affects all versions of the sofware also EOS when CVE-ID assigned...

7.5CVSS9.8AI score0.00706EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/25 1:37 p.m.13 views

CVE-2023-2851 SQLi in Ceppatron

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned...

9.8CVSS7.4AI score0.00706EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/25 12:00 a.m.9 views

PT-2023-21770 · Agt Tech · Agt Tech Ceppatron

Name of the Vulnerable Software and Affected Versions: AGT Tech Ceppatron affected versions not specified Description: The issue is related to an SQL Injection vulnerability, allowing Command Line Execution through SQL Injection. This vulnerability affects all versions of the software...

9.8CVSS8.2AI score0.00706EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2023/05/24 12:30 p.m.213 views

Jsfinder - Fetches JavaScript Files Quickly And Comprehensively

jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the URLs of the files to a text file. The tool is designed to ...

7.2AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.7 views

The vulnerability of the Command Line Interface (CLI) of the Cisco Identity Services Engine (ISE) management platform allows a hacker to escape from the isolated software environment and elevate their privileges to the root level.

The vulnerability of the Command Line Interface CLI of the Cisco Identity Services Engine ISE management platform relates to deficiencies in the name checking of paths to restricted directories. Exploiting this vulnerability could allow an attacker to exit from a isolated software environment and...

6.2CVSS6.6AI score0.00221EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.11 views

The vulnerability of the Command Line Interface (CLI) of the Cisco Identity Services Engine (ISE) management platform allows a hacker to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the Command Line Interface CLI of the Cisco Identity Services Engine ISE platform exists because measures are not taken to neutralize the special commands used in the operating system command line. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

6.2CVSS7.5AI score0.01188EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder