Lucene search
+L

8251 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco TelePresence Collaboration Endpoint (CE) and Cisco TelePresence Codec (TC) allows attackers to gain increased privileges.

The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint CE and Cisco TelePresence Codec TC devices is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain increased...

9CVSS7.5AI score0.01746EPSS
SaveExploits0References3Affected Software2
Fedora
Fedora
added 2019/12/04 1:15 a.m.41 views

[SECURITY] Fedora 31 Update: clamav-0.101.5-1.fc31

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

7.5CVSS1.9AI score0.03135EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.9 views

The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.6AI score0.0065EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.10 views

The vulnerability of the Apache Tomcat application server arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Apache Tomcat application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, as a result of the default enabled parameter “enableCmdLineArguments” of the CGI server...

9.3CVSS8AI score0.99606EPSS
SaveExploits11References6Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.7 views

The vulnerability of the command-line interface (CLI) of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices allows a hacker to write arbitrary files into the root directory.

The vulnerability of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software is related to improper handling of permissions. Exploiting this vulnerability could allow an attacker to write arbitrary files into the root directory...

6.6CVSS5.6AI score0.00256EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2019/11/30 12:58 a.m.14 views

[SECURITY] Fedora 31 Update: ImageMagick-6.9.10.75-1.fc31

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

0.8AI score
SaveExploits0
Fedora
Fedora
added 2019/11/30 12:58 a.m.64 views

[SECURITY] Fedora 31 Update: xen-4.12.1-7.fc31

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

9.8CVSS2.1AI score0.03133EPSS
SaveExploits0
OSV
OSV
added 2019/11/26 4:15 a.m.11 views

CVE-2019-15997

A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI...

6.7CVSS6.9AI score0.00729EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/26 4:15 a.m.7 views

CVE-2019-15986

A vulnerability in the CLI of Cisco Unity Express could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. To exploit this vulnerability, an attacker would need valid administrator credentials. The vulnerability is due to improper input...

6.7CVSS7AI score0.00404EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/11/26 12:0 a.m.11 views

PT-2019-5284

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.8.6 Ansible versions prior to 2.7.14 Ansible versions prior to 2.6.20 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow a remote...

7.1CVSS7.6AI score0.01663EPSS
SaveExploits0References162
Fedora
Fedora
added 2019/11/25 2:33 a.m.33 views

[SECURITY] Fedora 29 Update: koji-1.19.1-1.fc29

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

6.5CVSS2.4AI score0.02816EPSS
SaveExploits0
Kitploit
Kitploit
added 2019/11/22 9:0 p.m.136 views

DNCI - Dot Net Code Injector

DNCI allows the injection of .Net code .exe or .dll remotely in unmanaged processes in windows. 1. Project Structure The project is structured in: DNCI.Injector.Library - Injection library. Contains all injection components and logic; DNCI.Injector.Runner - Command line utility for injection;...

8.1AI score
SaveExploits0References1
Gitee
Gitee
added 2019/11/21 12:43 p.m.10 views

POC-T

This is a Python-based penetration testing framework called POC-T. It is a concurrent framework that allows users to perform various types of attacks, including vulnerability verification, file upload, weak password cracking, and more. The framework has a modular design, with each module...

7AI score
SaveExploits0
CNVD
CNVD
added 2019/11/20 12:0 a.m.5 views

tcpdump Input Validation Error Vulnerability

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capturing etc. An input validation error vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to...

9.8CVSS6.5AI score0.04066EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.9 views

The vulnerability of the command-line interface (CLI) of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the command-line interface CLI of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code with root privileges by sending...

6.4CVSS7AI score0.00431EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.8 views

The numerous vulnerabilities in the command-line interface (CLI) of the Cisco TelePresence Collaboration Endpoint (CE) software allow attackers to compromise the integrity of protected information or cause service failures.

The multiple vulnerabilities of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software exist due to insufficient validation of input data. Exploitation of these vulnerabilities could allow attackers to compromise the integrity of protected...

6.2CVSS6AI score0.00271EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/11/19 12:0 a.m.14 views

Unspecified Vulnerability in Fortinet FortiOS (CNVD-2019-42441)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

5.5CVSS6.5AI score0.00189EPSS
SaveExploits0References1
Fedora
Fedora
added 2019/11/17 1:42 a.m.60 views

[SECURITY] Fedora 29 Update: xen-4.11.2-2.fc29

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

9.8CVSS2.1AI score0.02546EPSS
SaveExploits0
OSV
OSV
added 2019/11/11 12:4 p.m.7 views

SUSE-SU-2019:14215-1 Security update for tar

This update for tar to version 1.27.1 fixes the following issues: tar 1.27.1 brings following changes jscECO-339 Sparse files with large data No backticks in quoting --owner and --group names and numbers Support for POSIX ACLs, extended attributes and SELinux context. Passing command line argumen...

7.5CVSS5AI score0.03028EPSS
SaveExploits1References7
Veracode
Veracode
added 2019/11/06 12:20 a.m.19 views

Information Disclosure

Libosinfo is vulnerable to information disclosure. It is due to the osinfo-install-script option which leaks password via command line argument...

7.8CVSS2.4AI score0.00431EPSS
SaveExploits0References25Affected Software4
Rows per page
Query Builder