4 matches found
CVE-2025-57739
An SQL Injection vulnerability (CWE-89) exists in Fortinet FortiMail versions 7.6.0 through 7.6.3 , 7.4.0 through 7.4.5 , and 7.2.0 through 7.2.8 . The flaw is caused by an improper neutralization of special elements used in an SQL command. This allows an authenticated attacker to execute unautho...
Medium: bash
Issue Overview: rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any command with the permissions of the shell. CVE-2019-9924 Affected Packages: bash Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository...
CVE-2020-12776
Openfind Mail2000 contains Broken Access Control vulnerability, which can be used to execute unauthorized commands after attackers obtain the administrator access token or cookie...
PT-2018-2325
Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the astra-safepolicy utility of Astra Linux, which fails to properly clean the environment when launching interpreters. This allows unauthorized users ...