9478 matches found
Convert2RHEL Insufficient Protection Password Cracking
The vulnerability of the Convert2RHEL tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker to obtain user passwords using the command line...
CVE-2021-41032
An improper access control vulnerability CWE-284 in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands...
Command Injection
git-pull-or-clone is vulnerable to command injection. A remote attacker is able to inject malicious command-line arguments to be executed on the OS through the gitClone function via the --upload-pack feature of git...
GHSA-MFM6-R9G2-Q4R7 `OCSP_basic_verify` may incorrectly verify the response signing certificate
The function OCSPbasicverify verifies the signer certificate on an OCSP response. In the case where the non-default flag OCSPNOCHECKS is used then the response will be positive meaning a successful verification even in the case where the response signing certificate fails to verify. It is...
Design/Logic Flaw
The function OCSPbasicverify verifies the signer certificate on an OCSP response. In the case where the non-default flag OCSPNOCHECKS is used then the response will be positive meaning a successful verification even in the case where the response signing certificate fails to verify. It is...
CVE-2022-20729
A vulnerability in CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands...
CVE-2022-1343
The function OCSPbasicverify verifies the signer certificate on an OCSP response. In the case where the non-default flag OCSPNOCHECKS is used then the response will be positive meaning a successful verification even in the case where the response signing certificate fails to verify. It is...
The c_rehash script allows command injection
The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the...
CVE-2022-28571
D-link 882 DIR882A1FW130B06 was discovered to contain a command injection vulnerability in/usr/bin/cli...
maven-shared-utils: Command injection via Commandline class
A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...
[SECURITY] Fedora 34 Update: xen-4.14.5-1.fc34
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
GHSA-74W6-WW7W-45J9 Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
The Indexed Search Engine indexedsearch system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line index...
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
The Indexed Search Engine indexedsearch system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line index...
Fedora: Security Advisory for gh (FEDORA-2022-db16b42897)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 34 Update: grpcurl-1.8.6-2.fc34
Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers...
[SECURITY] Fedora 35 Update: grpcurl-1.8.6-2.fc35
Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers...
[SECURITY] Fedora 35 Update: doctl-1.73.0-2.fc35
The official command line interface for the DigitalOcean API...
[SECURITY] Fedora 35 Update: gh-2.7.0-2.fc35
GitHub=EF=BF=BD=EF=BF=BD=EF=BF=BDs official command line tool...