CVE-2021-32499

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable...

CVE-2021-32499

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable...

Exploit for Path Traversal in Grafana

CVE-2021-43798 Grafana任意文件读取 1.installation shell pip3...

PT-2021-19730

Name of the Vulnerable Software and Affected Versions: SICK SOPAS ET versions prior to 4.8.0 Description: The issue allows attackers to manipulate command line arguments, passing any value to the Emulator executable. Recommendations: For versions prior to 4.8.0, update to version 4.8.0 or later t...

CVE-2021-32499: Improper Neutralization of Special Elements in Output Used by a Downstream Component

SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable...

CVE-2021-45101

The CVE-2021-45101 issue affects HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. A user with only READ access to an HTCondor SchedD or Collector daemon can use standard command-line tools to discover secrets, potentially allowing them to control other users’ jobs and/or read t...

PT-2021-23968 · Jinja2 +1 · Jinja2 +1

Name of the Vulnerable Software and Affected Versions: vault-cli versions prior to 3.0.0 Description: The issue concerns the ability of vault-cli to render templated values. When a secret starts with the prefix !template!, vault-cli interprets the rest of the contents of the secret as a Jinja2...

Stack-based buffer overflow in the searchwn function in Wordnet 2.0 2.1 and 3.0 might allow context-dependent attackers to execute arbitrary code via a long command line option. NOTE: this issue probably does not cross privilege boundaries except in cases in which Wordnet is used as a back end.

...

CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

Fedora: Security Advisory for rust-drg (FEDORA-2021-571e3ed33c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rust-drg-0.5.1-4.fc35

Command line tool to interact with a drogue-cloud instance...

Cisco SD-WAN CLI Command Execution

The vulnerability of the CLI component of Cisco SD-WAN software microprogramming systems exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary commands with root user privileges...

CVE-2021-36195

Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted...

CVE-2021-42757

A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

Buffer overflow

A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

Fortinet FortiOS security vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

CVE-2021-36195: Improper Neutralization of Special Elements used in an OS Command

Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted...

Fortinet FortiWeb operating system command injection vulnerability

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content.Fortinet FortiWeb A command injection...

PT-2021-21174

Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.1.0 through 6.1.2 FortiWeb versions 6.2.0 through 6.2.6 FortiWeb versions 6.3.0 through 6.3.15 FortiWeb versions 6.4.0 and 6.4.1 Description Multiple command injection vulnerabilities in the command line interpreter may all...