8508 matches found
CVE-2022-3183
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 are affected by CVE-2022-3183, an OS command injection vulnerability in a user-input handling function. The issue enables unauthenticated command execution via the device’s web interface, as documented by CISA ICS and NVD summaries. Affected ...
CVE-2022-3183
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability...
CVE-2022-3183
Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific function does not sanitize the input provided by the user, which may expose the affected to an OS command injection vulnerability...
CVE-2022-4643
CVE-2022-4643 affects the docconv project up to version 1.2.0, specifically the ConvertPDFImages function in pdf_ocr.go. The issue arises from manipulation of the path argument, enabling OS command injection via a remote attack. Remediation is to upgrade to version 1.2.1, with a patch identified ...
CVE-2022-4643 docconv pdf_ocr.go ConvertPDFImages os command injection
A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1...
CVE-2022-4643 docconv pdf_ocr.go ConvertPDFImages os command injection
A vulnerability was found in docconv up to 1.2.0. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdfocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.2.1...
CVE-2022-43443
OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially crafted request is sent to the management page...
CVE-2022-43466
OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command if a specially crafted request is sent to a specific CGI program...
Contec CONPROSYS HMI System (CHS)
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Contec Equipment: CONPROSYS HMI System CHS --------- Begin Update A part 1 of 5 --------- Vulnerability: OS Command Injection, Use of Default Credentials, Use of Password Hash Instead of Password for...
Oracle Linux 9 : 18 (ELSA-2022-8832)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8832 advisory. nodejs 1:18.12.1-1 - Rebase + CVEs - Resolves: 2142809 - Resolves: 2142830, 2142856 nodejs-nodemon 2.0.20-1 - Rebase to 2.0.20 Resolves: CVE-2022-3517...
OS Command Injection
nadesiko3 is vulnerable to OS command injection. The vulnerability exists due to compression and decompression which allows an attacker to inject and execute arbitrary commands...
OS Command Injection
nadesiko3 is vulnerable to os command injection. The vulnerability exists in multiple functions in index.mjs because appkey is not properly validated which allows an attacker to inject and execute arbitrary commands into the system via the file parameter...
Oracle Linux 8 : nodejs:18 (ELSA-2022-8833)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8833 advisory. - Rebase to version 18.12.1 Resolves: rhbz2125580 CVE-2022-43548 CVE-2022-3517 - Rebase to version 18.9.1 Resolves: CVE-2022-35255 CVE-2022-35256...
CVE-2022-45915
ILIAS before 7.16 allows OS Command Injection...
CVE-2022-45915
CVE-2022-45915 affects ILIAS eLearning platform. Multiple connected sources confirm that ILIAS prior to version 7.16 is vulnerable to OS Command Injection, with fixed version 7.16 or later. The vulnerability impacts versions
AlmaLinux 9 : nodejs:18 (ALSA-2022:8832)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8832 advisory. nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 nodejs: DNS rebinding in inspect via invalid octal IP address CVE-2022-43548 Tenable ha...
CVE-2022-44606
OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...
PT-2022-27683 · Ilias · Ilias
Name of the Vulnerable Software and Affected Versions: ILIAS versions prior to 7.16 Description: The issue allows for OS Command Injection. Recommendations: For versions prior to 7.16, update to version 7.16 or later to resolve the issue...
CVE-2022-44606
The CVE-2022-44606 issue affects UNIMO Technology UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier. The root cause is an OS command injection vulnerability in the device firmware that can be triggered by a remote authenticated attacker to run arbitrary OS commands...