8448 matches found
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
CVE-2020-5352
Dell EMC Data Protection Advisor (DPA) versions 6.4, 6.5 and 18.1 are affected by an OS command injection vulnerability (CVE-2020-5352). A remote authenticated attacker can execute arbitrary commands on the affected system. The issue is confirmed across multiple feeds (NVD entry and Nessus plugin...
Exploit for OS Command Injection in Factorfx Open_Computer_Software_Inventory_Next_Generation
CVE-2020-14947 The offici...
OS Command Injection
locutus is vulnerable to arbitrary code execution. The PHP function escapeshellarg can be bypassed when used in Locutus, which would allow an attacker to inject and execute arbitrary commands via shell arguments...
OS Command Injection
mversion is vulnerable to OS Command Injection. The vulnerability exists as the value of tagName in lib/git.js is passed to cp.exec without validation or sanitization, allowing an attacker to inject and execute arbitrary code...
Amazon Linux AMI : rubygem24-rake (ALAS-2020-1385)
The version of rubygem24-rake installed on the remote host is prior to 12.0.0-1.49. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1385 advisory. There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begin...
Amazon Linux AMI : rubygem-rake (ALAS-2020-1384)
It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1384 advisory. There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. CVE-2020-8130 Tenable has extracted the preceding...
CVE-2019-15310
An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user interaction. An attacker could retrieve the AWS key from the firmware and obtain full control over Linkplay's AWS estate, including S3 buckets containing device firmware. When...
CVE-2019-15310
CVE-2019-15310 affects Linkplay firmware. The issue enables WAN remote code execution without user interaction, enabling an attacker to retrieve the firmware AWS credentials and gain full control over Linkplay’s AWS estate, including S3 buckets containing device firmware. When combined with an OS...
OS Command Injection
bunyan is vulnerable to OS command injection. Untrusted user input is not validated and sanitized before being passed to the exec function in /bin/bunyan. This allows a remote attacker to inject and execute arbitrary OS commands in the system...
CVE-2020-9047
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could...
CVE-2020-9047
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could...
Command injection
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could...
CVE-2020-9047
Exacqvision Web Service <= 20.06.3.0 and ExacqVision Enterprise Manager
CVE-2020-9047 exacqVision Software - Improper Verification of Cryptographic Signature
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could...
OS Command Injection
node-traceroute is vulnerable to OS command injection. The Child.exec method accepts untrusted user input and allows an attacker to inject arbitrary OS commands after a newline character...
CVE-2019-9193 PostgreSQL allows OS level commands via COPY SQL function
An OS command injection vulnerability in FortiAnalyzer, FortiAuthenticator and FortiManager may allow a privileged system administrator to run OS level commands on the system via injecting commands in SQL queries...
Medium: rubygem-rake
Issue Overview: There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. CVE-2020-8130 Affected Packages: rubygem-rake Issue Correction: Run yum update rubygem-rake or yum update --advisory ALAS-2020-1384...
OS Command Injection
git-diff-apply is vulnerable to OS command injection. Lack of validation of untrusted input allows an attacker to inject arbitrary OS command via the affected parameter that is subsequently used in the diff function as a git command...