4224 matches found
Command Execution Vulnerability in Oracle WebLogic Server (CNVD-2021-32086)
Oracle WebLogic Server is a Java application server that fully implements the J2EE 1.5 specification, the latest Web services standards, and the highest level of interoperability standards. A command execution vulnerability exists in Oracle WebLogic Server that can be exploited by an attacker to...
Command Execution Vulnerability in Sapido Routers
Sapido is specialized in the design and development of intelligent wireless security system and hardware equipment, as well as the R & D capability of APP, across the SMART HOME TOTAL SOLUTION and intelligent manufacturing & ERP and other full range of enterprise integration solutions, providing...
Command Execution Vulnerability in NBR1300G of Riptide Networks Inc.
NBR1300G is an enterprise router from Ruijie Networks Co. A command execution vulnerability exists in the NBR1300G from Riptide Networks Corporation, which can be exploited by an attacker to execute arbitrary commands...
Command Execution Vulnerability in Intelligent Inspection System of Nanjing Sanshang Computer Software Development Co.
Intelligent inspection system is a comprehensive monitoring and scheduling management platform that combines GPS satellite positioning technology, GIS geographic information technology, GPRS/3G network communication technology, LBS base station positioning technology and Internet sensing technolo...
Command Execution Vulnerability in CenturyStar Configuration Software 9.1
Beijing Tianxing Configuration Software Co., Ltd. is a high-tech enterprise engaged in the research and development of industrial automation software. A command execution vulnerability exists in CenturyStar Configuration Software 9.1, which can be exploited by attackers to gain control of the...
Code execution vulnerability at hybbs 2.3.2 plugin
hybbs is a PHP web program that supports plugin extensions and template extensions. A code execution vulnerability exists in the hybbs 2.3.2 plugin, which can be exploited by an attacker to gain control of the web server...
SUSE: Security Advisory (SUSE-SU-2020:0331-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Command execution vulnerability in Four-Faith build 2781M router
Four-Faith is a router product of Xiamen Four-Faith Communication Technology Co. A command execution vulnerability exists in the Four-Faith build 2781M router, which can be exploited by an attacker to gain control of the server...
Command execution vulnerability in kiteCMS backend
KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP5.1. version of the development, applicable to individuals and enterprises to quickly build stations and development needs. kiteCMS backend command execution vulnerability , attackers can exploit t...
Command Execution Vulnerability in PbootCMS of Hunan Aoyun Network Technology Co. Ltd (CNVD-2021-32163)
PbootCMS is an open source and free PHP enterprise web development and construction management system. Hunan Avion Network Technology Co., Ltd PbootCMS has a command execution vulnerability that can be exploited by attackers to execute arbitrary PHP code and gain server privileges...
WP Super Cache Plugin for WordPress < 1.7.2 Remote Code Execution
The WordPress WP Super Cache Plugin installed on the remote host is affected by an authenticated remote code execution vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-30860)
Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...
Microsoft Visual Studio Code Execution Vulnerability (CNVD-2021-29995)
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of the victim...
Command Execution Vulnerability in DrayTek Vigor2960 (CNVD-2021-28719)
Vigor2960 is a load balancing router and VPN gateway appliance from DrayTek Taiwan, China. The DrayTek Vigor2960 suffers from a command execution vulnerability that can be exploited by an attacker to gain ROOT privileges...
Command Execution Vulnerability in V8+ Terminal Security (CNVD-2021-30535)
V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...
Command Execution Vulnerability in Netnifty Security Gateway
Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. which was formerly known as Lenovo Group's Information Security Division. A command execution vulnerability exists in the Netnifty Security Gateway, which can be exploited by attackers ...
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2021-29060)
Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited by an attacker to achieve remote code execution...
Microsoft Visual Studio Code Execution Vulnerability (CNVD-2021-29880)
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by an attacker to execute arbitrary code on a system with the privileges of the victim...
