Lucene search
K

6 matches found

CNVD
CNVD
added 2021/09/09 12:0 a.m.17 views

Cisco IOS XR Software Arbitrary File Read/Write Vulnerability

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to an arbitrary file read/write vulnerability that could be exploited by attackers to overwrite and read arbitrary files on local devices...

8.5CVSS4AI score0.018EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/09/08 12:0 a.m.1 views

Cisco IOS XR 参数注入漏洞

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to an arbitrary file read/write vulnerability that could be exploited by attackers to overwrite and read arbitrary files on local devices...

8.5CVSS5.8AI score0.018EPSS
Exploits0References9
OSV
OSV
added 2020/09/03 5:5 p.m.9 views

GHSA-W725-67P7-XV22 Command Injection in local-devices

Versions of local-devices prior to 3.0.0 are vulnerable to Command Injection. The package does not validate input on ip addresses and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system. Recommendation Upgrade to version 3.0.0 or later...

7.5AI score
Exploits0References4
vulnersOsv
vulnersOsv
added 2020/09/03 5:5 p.m.2 views

@pcelvng/net (>=0.4.2 <=0.12.1), alfred-show-network-info (>=0.1.3 <=0.2.2) +5 more potentially affected by unknown CVE via local-devices (>=1.1.1 <=2.0.0)

local-devices NPM version =1.1.1, =0.4.2, =0.1.3, =0.0.1, =0.0.2 - homebridge-webos-tv-ext =1.6.1 - node-red-contrib-tapo-new-api =0.4.4 - panalyze =0.1.0 - perfect-bandwidth =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-W725-67P7-XV22...

5.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2020/09/03 5:5 p.m.15 views

Command Injection in local-devices

Versions of local-devices prior to 3.0.0 are vulnerable to Command Injection. The package does not validate input on ip addresses and concatenates it to an exec call, allowing attackers to run arbitrary commands in the system. Recommendation Upgrade to version 3.0.0 or later...

6.9AI score
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2018/09/04 12:0 a.m.3 views

Moderate: Red Hat Enhancement Advisory: VDSM bug fix and enhancement update 4.2

Updated vdsm packages that fix several bugs and add various enhancements are now available. VDSM is a management module that serves as a Red Hat Virtualization Manager agent on Red Hat Virtualization Host or Red Hat Enterprise Linux hosts. Changes to the vdsm component: Previously, multipath...

7.1CVSS6.6AI score0.0032EPSS
Exploits0References3
Rows per page
Query Builder