CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs...

The vulnerability of the .NET Framework software platform is related to errors in data input processing, allowing an attacker to execute arbitrary code.

The vulnerability of the .NET Framework software platform is related to errors in data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted input data...

A vulnerability exists in the CronJob API of Cisco Digital Network Architecture, allowing attackers to execute arbitrary commands with root privileges.

The vulnerability in the CronJob API of Cisco Digital Network Architecture DNA platform is caused by errors in processing input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges remotely...

The vulnerability in the web interface of the Cisco Prime Collaboration Assurance software for managing unified communications is caused by errors in processing input data, allowing a hacker to re-record files in the file system.

The vulnerability of the Cisco Prime Collaboration Assurance software management interface arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to re-record files in the file system...

The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...

The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series allows a hacker to cause maintenance failures.

The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in the Cisco NX-OS network operating system allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in the Cisco NX-OS network operating system arises due to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to restart the device and trigger a service failure using speciall...

Rockwell Automation Allen-Bradley CompactLogix Cross-Site Scripting (CVE-2016-2279)

A cross site scripting vulnerability has been reported in Rockwell Scada System. The vulnerability is due to lack of sanitization of user supplied input data. A remote attacker can exploit this vulnerability to execute arbitrary HTML and script code in a browser session in the context of the...

Command injection

Devices in the Linksys ESeries line of routers Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04 are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAMData entered into the 'Router Name' input fiel...

The vulnerability of Microsoft Word text editors allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Word relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted PDF file...

The vulnerability of the GetInfoCommand function in the PDF file conversion software pdf-image for Node.js allows a hacker to execute arbitrary commands on the server.

The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

CVE-2017-3936

OS Command Injection vulnerability in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output...

The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment, related to insufficient verification of input data, allows a intruder to trigger a service failure.

The vulnerability in Siemens SIMATIC and OpenPCS 7 industrial equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a maintenance failure by sending a specially crafted request through the remote control service of...

The vulnerability of the update_module.php script in the U.motion builder system allows a perpetrator to execute arbitrary code.

The vulnerability of the updatemodule.php script in the U.motion builder system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request to the server using the updatefile parameter...

Cross site scripting

Cross Site Scripting XSS exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data...

CVE-2018-7721

Cross Site Scripting XSS exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data...

CVE-2018-7721

Cross Site Scripting XSS exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data...

The vulnerability of the microprogramming software of the NR Electric PCS-9611 protection device arises from insufficient verification of input data. This vulnerability allows a perpetrator to gain access to arbitrary system resources and influence the functionality of the system.

The vulnerability of the microprogramming software of the NR Electric PCS-9611 protection device exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to arbitrary system resources and influence the...

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...