Lucene search
K

6 matches found

Snyk
Snyk
added 2026/04/10 5:8 p.m.1 views

Incorrect Resource Transfer Between Spheres

Overview Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres via the ForwardToWall process. An attacker can inject ANSI escape sequences into user terminals by executing a logger -p emerg command when the relevant configuration is enabled. This is only...

3.3CVSS5.8AI score0.00005EPSS
Exploits1References2
OSV
OSV
added 2026/04/10 4:16 p.m.3 views

DEBIAN-CVE-2026-40228

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set...

3.3CVSS5.5AI score0.00005EPSS
Exploits1References1
NVD
NVD
added 2022/05/17 9:15 p.m.12 views

CVE-2022-1357

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command...

9.8CVSS0.01752EPSS
Exploits0References1
Prion
Prion
added 2022/05/17 9:15 p.m.8 views

Command injection

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command...

7.5CVSS9.7AI score0.01752EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/17 8:10 p.m.18 views

CVE-2022-1357 Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command...

9.8CVSS9.8AI score0.01752EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2007/04/10 12:0 a.m.1 views

PT-2007-3271

Name of the Vulnerable Software and Affected Versions DirectAdmin versions prior to 1.293 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via http or ftp requests logged in various log files, including /var/log/directadmin/security.log. It also enabl...

6.8CVSS6.3AI score0.02012EPSS
Exploits1References11
Rows per page
Query Builder