CVE-2023-36830 SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.

SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the librarypath config value to allow arbitrary python code to be executed via macros. For many users wh...

CVE-2023-36830 SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.

SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the librarypath config value to allow arbitrary python code to be executed via macros. For many users wh...

CVE-2023-36830 SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.

SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the librarypath config value to allow arbitrary python code to be executed via macros. For many users wh...

CVE-2023-36830

SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the librarypath config value to allow arbitrary python code to be executed via macros. For many users wh...

CVE-2023-36830

SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the librarypath config value to allow arbitrary python code to be executed via macros. For many users wh...

OpenBlob Component Code Execution

The vulnerability of the OpenBlob component in the console-based graphic editor ImageMagick exists because measures to neutralize special elements used in the operating system’s command line have not been implemented. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

Format string

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafte...

CVE-2023-35977

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35976

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35975

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system...

CVE-2023-35977

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35976

CVE-2023-35976 describes an authenticated sensitive information disclosure in ArubaOS by exploiting the command-line interface. Across provided documents, the vulnerability allows an authenticated attacker to access data beyond the user’s existing privilege level. The ArubaOS PSA and Nessus plugi...

CVE-2023-35976 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35976 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

CVE-2023-35975

CVE-2023-35975 describes an authenticated path traversal in ArubaOS CLI that allows deletion of arbitrary files in the underlying OS. Affected products are ArubaOS versions prior to fixed releases; Nessus ARUBA-PSA-2023-008 lists ArubaOS <8.6.0.21, <8.10.0.7, <8.11.1.1, and

CVE-2023-35974 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

PT-2023-5615

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities allows an attacker to execute...

Aruba Networks ArubaOS information leakage vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. An information disclosure vulnerability exists in Aruba Networks ArubaOS, which arises from a command line interface that allow...

Aruba Networks ArubaOS Command Injection Vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. Aruba Networks ArubaOS suffers from a command injection vulnerability that originates from an authenticated command injection i...

Aruba Networks ArubaOS information leakage vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. An information disclosure vulnerability exists in Aruba Networks ArubaOS, which arises from a command line interface that allow...