329 matches found
PT-2015-6134
Name of the Vulnerable Software and Affected Versions OpenAFS versions prior to 1.6.13 Description The issue allows local users to cause a denial of service, resulting in memory corruption and kernel panic, via a crafted command. Recommendations For versions prior to 1.6.13, update to version...
CVE-2015-4276
Cisco WebEx Meetings Server 2.5MR1 allows remote authenticated users to execute arbitrary code via a crafted command parameter, aka Bug ID CSCus56138...
CVE-2014-7288
Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action...
CVE-2014-3153
The futexrequeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEXREQUEUE command that facilitates unsafe waiter modification...
UBUNTU-CVE-2012-6647
The futexwaitrequeuepi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted...
CVE-2014-0741
The certificate-import feature in the Certificate Authority Proxy Function CAPF CLI implementation in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows local users to read or modify arbitrary files via a crafted command, aka Bug ID CSCum95461...
Directory traversal
Directory traversal vulnerability in filesys in Cisco NX-OS 6.12 and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275...
Integer overflow
Multiple integer overflows in pktlength.c in Chrony before 1.29 allow remote attackers to cause a denial of service crash via a crafted 1 REQSUBNETSACCESSED or 2 REQCLIENTACCESSES command request to the PKLCommandLength function or crafted 3 RPYSUBNETSACCESSED, 4 RPYCLIENTACCESSES, 5...
PT-2013-5631
Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to cause a denial of service via crafted command parameters that trigger hardware-component write operations. Recommendations At the...
Command injection
The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and read arbitrary files via crafted command parameters within the command-line interface, aka Bug ID CSCtr43374...
Command injection
Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service management-server crash by using the command-line interface for a crafted command, aka Ref ID 35254...
CVE-2012-6597
Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service management-server crash by using the command-line interface for a crafted command, aka Ref ID 35254...
CVE-2012-6597: Improper Input Validation
Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to cause a denial of service management-server crash by using the command-line interface for a crafted command, aka Ref ID 35254...
CVE-2013-3384
The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550; Email Security Appliance devices before 7.1.5-104, 7.3 before 7.3.2-026, 7.5 before 7.5.2-203, and 7.6 before 7.6.3-019; and Content Security Management...
PT-2013-4341
Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance devices versions prior to 7.1.3-013 Cisco Web Security Appliance devices versions 7.5 prior to 7.5.0-838 Cisco Web Security Appliance devices versions 7.7 prior to 7.7.0-550 Description The issue allows remote...
CVE-2013-3383: Improper Control of Generation of Code
The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294...
CVE-2013-0715
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...
Command injection
The WebCLI component in Wind River VxWorks 5.5 through 6.9 allows remote authenticated users to cause a denial of service CLI session crash via a crafted command string...
PT-2013-2553
Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 5.5 through 6.9 Description The issue allows remote authenticated users to cause a denial of service, resulting in a CLI session crash, by sending a crafted command string to the WebCLI component. Recommendations Fo...