9426 matches found
ROS-20230130-01
A vulnerability in the cross-platform JavaScript runtime Node.js is related to incorrect handling of an exception in the src/nodeoptions-inl.h file when an invalid command line argument is input. exception in src/nodeoptions-inl.h file when an invalid command line argument is supplied. Exploitati...
EulerOS Virtualization 3.0.2.2 : libosinfo (EulerOS-SA-2023-1267)
According to the versions of the libosinfo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to...
[SECURITY] Fedora 37 Update: rust-exa-0.10.1-9.fc37
exa is a modern replacement for the command-line program ls that ships with Unix and Linux operating systems, with more features and better defaults. It uses colours to distinguish file types and metadata. It knows about symlinks, extended attributes, and Git. And it=EF=BF=BD=EF=BF =BD=EF=BF=BDs...
SSTImap - Automatic SSTI Detection Tool With Interactive Interface
SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive penetration testing tool for SSTI detection...
CVE-2022-41023
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...
PT-2023-13918 · Siretta · Siretta Quartz-Gold
Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue is related to stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary comma...
USN-5820-1 exuberant-ctags vulnerability
Lorenz Hipp discovered a flaw in exuberant-ctags handling of the tag filename command-line argument. A crafted tag filename specified in the command line or in the configuration file could result in arbitrary command execution...
conntrack-tools bug fix and enhancement update
An update is available for conntrack-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The conntrack-tools packages enable the user to set up a High...
The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface allows a attacker to delete any files from the file system.
The vulnerability of the command-line interface CLI of Cisco IOS XE SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to delete any files from the file system...
Tai-e - An Easy-To-Learn/Use Static Analysis Framework For Java
Tai-e What is Tai-e? Tai-e Chinese: 太阿; pronunciation: ˈtaɪə: is a new static analysis framework for Java please see our technical report for details, which features arguably the "best" designs from both the novel ones we proposed and those of classic frameworks such as Soot, WALA, Doop, and...
The vulnerability of the PFE (evo-pfemand) control demon in JunOS Evolved operating systems allows a intruder to trigger a service failure.
The vulnerability of the PFE evo-pfemand control daemon for JunOS Evolved involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by executing arbitrary commands through the command line interface, or by sending...
CVE-2015-10062
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...
Design/Logic Flaw
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...
CVE-2015-10062 galaxy-data-resource Command Line Template injection
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...
CVE-2015-10062
The CVE-2015-10062 entry relates to galaxy-data-resource up to version 14.10.0, with an injection vulnerability in the Command Line Template component caused by manipulation of an unspecified part. A fix is available: upgrade to version 14.10.1. A patch hash is provided (50d65f45d3f5be5d1fbff2e45...
CVE-2015-10062
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...
PT-2023-10241 · Unknown · Galaxy-Data-Resource
Name of the Vulnerable Software and Affected Versions: galaxy-data-resource versions up to 14.10.0 Description: A problematic issue was found in the Command Line Template component of galaxy-data-resource, leading to injection through manipulation of an unknown part. Upgrading to version 14.10.1...
CVE-2015-10062: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named...
PT-2023-1332 · Node.Js · Node.Js
Name of the Vulnerable Software and Affected Versions: Node.js affected versions not specified Description: The issue is related to incorrect exception handling in the src/node options-inl.h file when an invalid command-line argument is provided. This can allow a remote attacker to cause the...
