28097 matches found
CVE-2025-8078
CVE-2025-8078 describes a post-authentication command-injection vulnerability in Zyxel devices: Zyxel ATP series firmware v4.32–v5.40, USG FLEX series v4.50–v5.40, USG FLEX 50(W) series v4.16–v5.40, and USG20(W)-VPN series v4.16–v5.40. An authenticated administrator can pass a crafted string as a...
CVE-2025-6542
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
CVE-2025-7851
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...
CVE-2025-6542
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
CVE-2025-7851
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
EUVD-2025-35115
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways...
CVE-2025-7850 Authenticated OS command execution
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways...
EUVD-2025-35117
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
CVE-2025-6542 OS command injection in multiple parameters
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker...
EUVD-2025-35118
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
CVE-2025-6541 OS command injection using information obtained from the web management interface
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
TP-Link Omada gateway security vulnerabilities
TP-Link Omada gateways is a security gateway from China P&L TP-Link. A security vulnerability exists in TP-Link Omada gateways that originates from a remote unauthenticated attacker who could execute arbitrary OS commands...
TP-Link Omada gateway security vulnerabilities
TP-Link Omada gateways is a security gateway from China P&L TP-Link. A security vulnerability exists in TP-Link Omada gateways, which originates from restricted conditions where an attacker can gain access to the underlying operating system root shell...
CVE-2025-47901
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...
EUVD-2025-35080
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...
CVE-2025-47900 RCE on backup configuration password
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...
CVE-2025-62577
ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges...
PT-2025-42749
Name of the Vulnerable Software and Affected Versions ETERNUS SF affected versions not specified Description ETERNUS SF provided by Fsas Technologies Inc. has an issue with default permissions. A user with limited access to the management server could potentially gain access to database...