Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-51581

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.55206EPSS
Exploits1References1
NVD
NVD
added 2022/12/01 10:15 a.m.12 views

CVE-2022-4221

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

9.8CVSS0.55206EPSS
Exploits1References1
OSV
OSV
added 2022/12/01 10:15 a.m.3 views

CVE-2022-4221

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

9.8CVSS5.9AI score0.55206EPSS
Exploits1References1
Prion
Prion
added 2022/12/01 10:15 a.m.13 views

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...

7.5CVSS9.6AI score0.55206EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/12/01 9:26 a.m.65 views

CVE-2022-4221

CVE-2022-4221 concerns ASUS NAS-M25 prior to 1.0.1.7, where an improper neutralization of special elements in OS commands allows an unauthenticated attacker to inject commands via unsanitized cookie values. Affected component is the OS command execution path tied to cookie handling. Documented im...

9.8CVSS9.8AI score0.55206EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/01 12:0 a.m.3 views

PT-2022-26313 · Asus · Asus Nas-M25

Name of the Vulnerable Software and Affected Versions: Asus NAS-M25 versions through 1.0.1.7 Description: The issue is related to an improper neutralization of special elements used in an OS command, allowing an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie value...

9.8CVSS9.3AI score0.55206EPSS
Exploits1References3
Rows per page
Query Builder