9479 matches found
BusyBox Memory Use Code Execution
The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
ROS-20211223-07
BusyBox command line utility suite vulnerability is related to reading beyond memory boundaries. Exploitation The vulnerability could allow an attacker acting remotely to cause a read outside bounds error and read the contents of memory on the system or perform a denial of service DoS attack. A...
DEBIAN-CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2021-45463
loadcache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIM...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
Directory traversal
Specially-crafted command line arguments can lead to arbitrary file deletion. The handledelete function does not attempt to sanitize or otherwise validate the contents of the file parameter passed to the function as argv1, allowing an authenticated attacker to supply directory traversal primitive...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
CVE-2021-21909
CVE-2021-21909 affects Garrett Metal Detectors iC Module CMA Version 5.0. Affected component is the CMA CLI (del/delenv) exposed over TCP (port 6877) with an authenticated CLI. Root cause is improper validation/sanitization of the user-supplied file argument in handle_delete/delEnv, allowing dire...
CVE-2021-21908
Garrett Metal Detectors iC Module CMA v5.0 exposes an authenticated CLI over TCP (port 6877) with del and delenv commands. TALOS details CVE-2021-21908: handle_delete does not validate argv[1], allowing directory traversal to delete files (e.g., via delenv or via non-.cnt/.log paths). The del fun...
CVE-2021-21908
Specially-crafted command line arguments can lead to arbitrary file deletion. The handledelete function does not attempt to sanitize or otherwise validate the contents of the file parameter passed to the function as argv1, allowing an authenticated attacker to supply directory traversal primitive...
CVE-2021-21907
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted command line argument can lead to local file inclusion. An attacker can provide malicious input to trigger this vulnerability...
PT-2021-14835
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue allows an attacker to trigger arbitrary file deletion through specially-crafted command line arguments in the del .cnt|.log file delete command...
PT-2021-14833 · Unknown · Ic Module Cma
Name of the Vulnerable Software and Affected Versions: iC Module CMA Version 5.0 Description: A directory traversal issue exists in the CMA CLI getenv command functionality, allowing a specially-crafted command line argument to lead to local file inclusion. An attacker can provide malicious input...
PT-2021-14832 · Garrett Metal Detectors · Garrett Metal Detectors Ic Module Cma
Name of the Vulnerable Software and Affected Versions: Garrett Metal Detectors iC Module CMA Version 5.0 Description: A stack-based buffer overflow issue exists in the CMA readfile function of the Garrett Metal Detectors iC Module. The iC Module exposes an authenticated command-line interface CLI...
Garrett Metal Detectors: Path traversal vulnerability
Garrett Metal Detectors is a walk-in metal detector from Garrett U.S.A. Garrett Metal Detectors is vulnerable to a path traversal vulnerability that can be exploited by attackers to cause local file inclusion with specially crafted command line arguments...