12 matches found
CVE-2024-21878
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Enphase IQ Gateway formerly known as Envoy allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currentl...
CVE-2024-21878: Improper Neutralization of Special Elements used in a Command
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Enphase IQ Gateway formerly known as Envoy allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currentl...
CVE-2024-21878 Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Enphase IQ Gateway formerly known as Envoy allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currentl...
PT-2024-19109 · Enphase · Enphase Iq Gateway
Name of the Vulnerable Software and Affected Versions: Enphase IQ Gateway formerly known as Envoy versions 4.x through 8.x Description: The issue is related to an improper neutralization of special elements used in a command, allowing OS command injection. This vulnerability is present in an...
SUSE CVE-2017-3059
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...
Design/Logic Flaw
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...
UBUNTU-CVE-2017-3059
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...
CVE-2017-3059: Use After Free
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. Successful exploitation could lead to arbitrary code execution...
PT-2017-1812
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 25.0.0.127 and earlier Description The issue is related to a use after free vulnerability in the internal script object of Adobe Flash Player. This could lead to arbitrary code execution if successfully exploited. T...
CVE-2000-0860
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables...
CVE-2000-0860
The CVE-2000-0860 entry concerns PHP 3 and PHP 4 file-upload handling. The vulnerability arises from RFC 1867-based file uploads where an attacker can manipulate hidden form field names that correspond to internal PHP variables, enabling reading of arbitrary files. Public documentation in connect...
CVE-2000-0860: Undefined Security Weakness
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables...