Lucene search
+L

7 matches found

Mend
Mend
•added 2026/05/14 6:15 a.m.•1 views

WS-2019-0224

local-devices all versions are vulnerable to command injection when not validating input on ip addresses and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system...

9.3CVSS6AI score
SaveExploits0References2
CNVD
CNVD
•added 2021/09/09 12:00 a.m.•67 views

Cisco IOS XR Software Arbitrary File Read/Write Vulnerability

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to an arbitrary file read/write vulnerability that could be exploited by attackers to overwrite and read arbitrary files on local devices...

8.5CVSS4AI score0.01581EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/09/08 12:00 a.m.•22 views

Cisco IOS XR 参数注入漏洞

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to an arbitrary file read/write vulnerability that could be exploited by attackers to overwrite and read arbitrary files on local devices...

8.5CVSS5.8AI score0.01581EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2020/09/03 5:05 p.m.•26 views

Command Injection in local-devices

Versions of local-devices prior to 3.0.0 are vulnerable to Command Injection. The package does not validate input on ip addresses and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system. Recommendation Upgrade to version 3.0.0 or later...

6.9AI score
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/09/03 5:05 p.m.•18 views

GHSA-W725-67P7-XV22 Command Injection in local-devices

Versions of local-devices prior to 3.0.0 are vulnerable to Command Injection. The package does not validate input on ip addresses and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system. Recommendation Upgrade to version 3.0.0 or later...

7.5AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•0 views

PT-2020-21544

Name of the Vulnerable Software and Affected Versions local-devices versions prior to 3.0.0 Description The issue concerns Command Injection due to a lack of input validation on IP addresses, which are concatenated to an exec call. This allows attackers to execute arbitrary commands in the system...

6.4AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2018/09/04 12:00 a.m.•18 views

Moderate: Red Hat Enhancement Advisory: VDSM bug fix and enhancement update 4.2

Updated vdsm packages that fix several bugs and add various enhancements are now available. VDSM is a management module that serves as a Red Hat Virtualization Manager agent on Red Hat Virtualization Host or Red Hat Enterprise Linux hosts. Changes to the vdsm component: Previously, multipath...

7.1CVSS6.6AI score0.01185EPSS
SaveExploits0References3
Rows per page
Query Builder