13 matches found
EUVD-2011-0407
Malware in sbrugna...
EUVD-2023-32981
Malicious code in bioql PyPI...
CVE-2025-7388: Improper Neutralization of Special Elements used in a Command
It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...
CVE-2023-29412
CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface...
CVE-2023-29411
CVE-2023-29411 describes a Missing Authentication for Critical Function vulnerability in Schneider Electric’s Easy UPS Online Monitoring Software (Windows APC Easy UPS Online Monitoring Software and Schneider Electric Easy UPS Online Monitoring Software). The flaw allows changes to administrative...
CVE-2023-29411
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface...
CVE-2023-29411: Missing Authentication for Critical Function
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface...
PT-2023-2350
Name of the Vulnerable Software and Affected Versions APC Easy UPS Online Monitoring Software versions affected versions not specified Schneider Electric APC Easy UPS Online affected versions not specified Description A vulnerability exists due to improper neutralization of special elements used ...
PT-2023-2207
Name of the Vulnerable Software and Affected Versions APC Easy UPS Online Monitoring Software versions affected versions not specified Java RMI interface versions affected versions not specified Description The issue is related to a lack of authentication for a critical function, which could allo...
The vulnerability of the Java RMI interface of the Smart Network Configuration Manager system allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the Java RMI interface of the Smart Network Configuration Manager, a system for automatic management of network configurations, is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary...
CVE-2011-0381
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085...
PT-2011-2303
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Manager versions 1.2.x through 1.6.x Description The issue allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a command...
CVE-2011-0381: Improper Neutralization of Special Elements used in an OS Command
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI interface, related to a "command injection vulnerability," aka Bug ID CSCtf97085...