CVE-2021-32981

AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that ca...

The vulnerability of the Kubernetes command-line tool kubectl allows attackers to escalate their privileges. This vulnerability is exploited by attackers who aim to enhance their access levels.

The vulnerability of the Kubernetes command-line tool kubectl relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the application for identifying, analyzing, and visualizing business risks in IBM Data Risk Manager, related to the failure to take measures to neutralize specific elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to the failure to take measures to neutralize specific elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

The vulnerability of the QNAP QVR surveillance system, related to the failure to take measures to neutralize special elements used in the operating system’s command line, allows a intruder to execute arbitrary code.

The vulnerability of the QNAP QVR video surveillance system is related to the failure to take measures to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2020-16214

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value CSV file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadshee...

The vulnerability in the graph_realtime.php file of the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability in the graphrealtime.php file of the Cacti network monitoring software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...

The vulnerability of the External Port component of the TP-Link M7350 microprogramming system’s route blocker lies in its lack of measures to neutralize special elements used in the operating system commands. This allows a hacker to execute arbitrary commands.

The vulnerability of the External Port component of the TP-Link M7350 microprogramming system controller exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability in the visual Git client SourceTree exists due to the lack of measures taken to neutralize special elements used in the operating system command. This allows a malicious user to execute arbitrary commands.

The vulnerability of the visual Git client SourceTree exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by modifying the URL address...