8273 matches found
CVE-2018-0122
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite system files that are stored in the flash memory of an affected system. The vulnerability is due to insufficient...
Cisco StarOS File Overwrite Vulnerability
Cisco ASR 5000 Series Aggregation Services Routers is a 5000 Series security router appliance from Cisco USA. the Cisco StarOS operating system is a set of virtualized operating systems that run on them. A file overwrite vulnerability exists in the CLI of the Cisco StarOS operating system in the...
EMC RecoverPoint and EMC RecoverPoint for Virtual Machines Command Injection Vulnerability
EMC RecoverPoint and EMC RecoverPoint for Virtual Machines VMs are both products of EMC Corporation. The former is a suite of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. boxmgmt CLI is one of the command line programs. A...
metasploit-framework
This is the Metasploit Framework repository. It is an offensive tool for penetration testing and vulnerability exploitation. The primary vulnerability class/vector targeted by this framework is not explicitly stated, but it is likely to be a wide range of vulnerabilities, including remote code...
HP ThinPro OS Elevation of Privilege Vulnerability
HP ThinPro operating system is a set of operating systems from Hewlett-Packard HP that run on thin client devices. An elevation of privilege vulnerability exists in the command line shell in the HP ThinPro operating system. An attacker could exploit this vulnerability to gain elevation of privile...
GHSA-94CQ-7CCQ-CMCM lynx doesn't properly sanitize user input and exposes database password to unauthorized users
The lynx gem prior to 1.0.0 for Ruby places the configured password on command lines, which allows local users to obtain sensitive information by listing processes. As of version 1.0.0, lynx no longer supports a --password option. Passwords are only configured in a configuration file, so it's no...
Red Hat keycloak-httpd-client-install information disclosure vulnerability
Red Hat keycloak is a suite of software from Red Hat that provides authentication and management capabilities for modern applications and services. keycloak-httpd-client-install is an executable installer. A security vulnerability exists in Red Hat keycloak-httpd-client-install that stems from th...
The vulnerability of the command-line interface (CLI) of the NX-OS operating system of the Cisco Unified Computing System Central device’s centralized device management system allows a attacker to execute any command they desire.
The vulnerability of the command-line interface CLI of the NX-OS operating system of the Cisco Unified Computing System Central device management system exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with...
Design/Logic Flaw
A potential security vulnerability has been identified with the command line shell of the HP ThinPro operating system 6.1, 5.2.1, 5.2, 5.1, 5.0, and 4.4. The vulnerability could result in a local unauthorized elevation of privilege on an HP thin client device...
GHSA-RHGQ-VV9X-J4P5 lawn-login exposes database password to unauthorized users
The login function in lib/lawn.rb in the lawn-login gem 0.0.7 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...
Design/Logic Flaw
keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...
CVE-2017-15112
keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...
CVE-2017-15112
keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...
CVE-2017-15112
keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users...
PT-2018-5769
Name of the Vulnerable Software and Affected Versions: keycloak-httpd-client-install versions prior to 0.8 Description: The issue allows users to insecurely pass passwords through the command line, potentially leaking them via command history and process information to other local users...
CVE-2018-0115
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient validation of...
Cisco ESA and Content SMA Elevation of Privilege Vulnerabilities
Cisco Email Security Appliances ESAs are email security gateway products designed to detect and block a variety of email-borne threats, such as malware, spam, and phishing attacks.The Cisco Content Security Management Appliance SMA centralizes multiple Cisco email and network security appliances'...
[SECURITY] Fedora 27 Update: awstats-7.6-8.fc27
Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...
CVE-2014-4991
1 lib/dataset/database/mysql.rb and 2 lib/dataset/database/postgresql.rb in the codders-dataset gem 1.3.2.1 for Ruby place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the process...