317 matches found
CVE-2023-37058: Improper Privilege Management
Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command...
GO-2024-2816 kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt
kubevirt allows a local attacker to execute arbitrary code via a crafted command in kubevirt.io/kubevirt...
Improper Cluster Permissions
karmada-io karmada is vulnerable to Improper Cluster Permissions. The vulnerability is due to inadequate cluster permission which allows a local attacker to execute arbitrary code via a crafted command to get the token...
GHSA-WCCG-V638-J9Q2 karmada vulnerable to arbitrary code execution via a crafted command
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
karmada vulnerable to arbitrary code execution via a crafted command
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
AZL-64791 CVE-2024-33394 affecting package kubevirt for versions less than 1.5.0-2
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
CVE-2024-33394
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
CVE-2024-33396
An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
Kubevirt 安全漏洞
Kubevirt is a virtual machine manager. A security vulnerability exists in kubevirt v1.2.0 and earlier versions, which stems from a vulnerability that allows a local attacker to execute arbitrary code via a crafted command...
karmada-io karmada 安全漏洞
Karmada is a Kubernete management system open-sourced by karmada-io. A security vulnerability exists in karmada-io karmada v1.9.0 and earlier versions, which stems from a vulnerability that allows a local attacker to execute arbitrary code via a crafted command...
CVE-2024-33394
An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
CVE-2024-33393
An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
CVE-2024-33393
An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
CVE-2024-33393
The spidernet-io spiderpool Kubernetes underlay and RDMA networking solution (v.0.9.3 and earlier) contains a vulnerability due to improper clusterRole configurations . This incorrect access control allows a local attacker to execute arbitrary code by using a crafted command to access the token c...
Spidernet-io Spiderpool 安全漏洞
Spiderpool is a Kubernetes underlay and RDMA networking solution open-sourced by spidernet-io. A security vulnerability exists in Spidernet-io Spiderpool v.0.9.3 and earlier versions, which stems from a vulnerability that allows a local attacker to execute arbitrary code via a crafted command...
CVE-2024-33393
An issue in spidernet-io spiderpool v.0.9.3 and before allows a local attacker to execute arbitrary code via a crafted command to get the token component...
CVE-2023-29181
A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.12, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0....
CVE-2024-21780: Out-of-bounds Write
Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service DoS condition. Note that the affected products are no longer supported...
Command injection
An issue discovered in TenghuTOS TWS-200 firmware version:V4.0-201809201424 allows a remote attacker to execute arbitrary code via crafted command on the ping page component...