Cisco Enterprise NFV Infrastructure Software Local Command Injection Vulnerability

Cisco Enterprise NFV Infrastructure Software NFVIS is a suite of NVF infrastructure software platforms from Cisco. The platform enables full lifecycle management of virtualized services through a central orchestrator and controller.CLI is one of the command line tools. A command injection...

Cisco Identity Services Engine Local Command Injection Vulnerability

A vulnerability in certain CLI commands of Cisco Identity Services Engine ISE could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with the privileges of the local user. These commands should have been restricted from this user. The vulnerability...

CVE-2018-1410

IBM Notes Diagnostics IBM Client Application Access and IBM Notes could allow a local user to execute commands on the system. By crafting a command line sent via the shared memory IPC, which could be tricked into executing an executable chosen by the attacker. IBM X-Force ID: 138709...

CVE-2017-12552

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

CVE-2017-12551

A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

DEBIAN-CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

UBUNTU-CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to inject arbitrary commands to be executed...

CVE-2015-0853

svn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute arbitrary commands by using the "Command Shell" menu item while in the directory trunk/$xeyes...

Unicon Software eLux RP Screensavercc Component Elevation of Privilege Vulnerability

Unicon Software eLux RP is an operating system for thin client devices from Unicon Software, Germany.Screensavercc component is one of the screen saver components. A security vulnerability exists in the Screensavercc component of Unicon Software eLux RP versions prior to 5.5.0. An attacker can...

Cisco StarOS CLI Local Command Injection Vulnerability

The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to long-term evolution. and StarOS is the suite of Linux operating systems used in them. A security vulnerability in Cisco StarOS and Cisco Virtualized Packet Core VPC Software for handling C...

Cisco IOS XR Software Local Command Injection Vulnerability (cisco-sa-20170621-ios)

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Gemalto SmartDiag Diagnosis Tool 2.5 - Local Buffer Overflow (SEH)

Gemalto SmartDiag Diagnosis Tool 2.5 - Local Buffer Overflow SEH Exploit Title: Gemalto SmartDiag Diagnosis Tool = v2.5 - Buffer Overflow - SEH Overwrite Date: 16-03-2017 Software Link: http://support.gemalto.com/index.php?id=downloadtools Exploit Author: Majid Alqabandi Contact:...

Advantech WebAccess 8.2_20170330 ActiveX plugin has a local command execution vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A local command execution vulnerability exists in the...

The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.

The vulnerability of the CLI component of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary...

Local Command Execution Vulnerability in Multiple Cisco Products

Cisco Unified Computing System Manager is a set of embedded device management software.Cisco Firepower 9300 Security Appliance are Cisco security appliances.Cisco Firepower 9000 is an operating system running on the 9000 series firewall appliances from Cisco. Cisco Firepower 9000 is a Cisco...

Cisco IOS XE Software Startup Script Local Command Execution Vulnerability

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. SPDX-FileCopyrightText: 2017 Greenbone AG Some te...

Local Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-04455)

Cisco is a leading global provider of networking solutions. A local command injection vulnerability exists in multiple Cisco products. A local attacker could exploit this vulnerability to execute arbitrary commands...

Local Command Injection Vulnerability in Multiple Cisco Products (CNVD-2017-04873)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A local command injection vulnerability exists in Cisco Unified Communications Manager, which could be exploited by a local attacker to submit a special request and execute arbitrary shell commands...

Cisco IOS XE Software Startup Script Local Command Execution Vulnerability

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. The vulnerability is due to insufficient validati...

IBM PowerKVM Local Command Execution Vulnerability

IBM PowerKVM is a set of open virtualization solutions from the U.S. company IBM designed for the Power extension function of Linux servers based on POWER8 technology. The solution supports the sharing of physical computer memory and I/O resources, etc. through server virtualization. A local...