Lucene search
+L

10292 matches found

Cvelist
Cvelist
added 2025/03/28 1:45 a.m.23 views

CVE-2025-24382

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

7.3CVSS0.0127EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/28 1:45 a.m.65 views

CVE-2025-24382

CVE-2025-24382 (Dell Unity) affects Dell Unity versions 5.4 and earlier. The root cause is an improper neutralization of special elements used in OS commands (OS Command Injection) that allows an unauthenticated, remote attacker to execute arbitrary OS commands on the affected system. The practic...

7.3CVSS7.3AI score0.0127EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/28 1:41 a.m.28 views

CVE-2025-22398

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root...

9.8CVSS0.02131EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 1:41 a.m.10 views

CVE-2025-22398

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root...

9.8CVSS7.8AI score0.02131EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/28 1:41 a.m.116 views

CVE-2025-22398

Dell Unity OS (version 5.4 and earlier) contains an OS Command Injection vulnerability that allows an unauthenticated attacker with remote access to execute arbitrary commands as root, potentially taking control of the system. Affected component is the OS command handling in Dell Unity software; ...

9.8CVSS7.6AI score0.02131EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/28 1:35 a.m.11 views

CVE-2024-49563

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS7.4AI score0.00563EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/28 1:35 a.m.67 views

CVE-2024-49563

Dell Unity is affected by CVE-2024-49563: OS Command Injection in Dell Unity versions 5.4 and earlier, permitting a local low-privilege attacker to run arbitrary OS commands with root privileges and elevate privileges. The PT-2025-13415 entry confirms affected versions and notes no information ab...

7.8CVSS7.2AI score0.00563EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/03/28 1:31 a.m.66 views

CVE-2024-49564

Dell Unity is affected in CVE-2024-49564: versions 5.4 and earlier suffer OS Command Injection due to improper neutralization of special elements. A local, low-privileged attacker could run arbitrary OS commands with root privileges, elevating access. No explicit fix version is provided across th...

7.8CVSS7.2AI score0.0055EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/28 1:31 a.m.18 views

CVE-2024-49564

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS0.0055EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 1:31 a.m.8 views

CVE-2024-49564

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS7.4AI score0.0055EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 1:28 a.m.15 views

CVE-2024-49565

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS7AI score0.0055EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/28 1:28 a.m.75 views

CVE-2024-49565

Dell Unity is affected by CVE-2024-49565: versions 5.4 and earlier suffer an OS Command Injection due to improper neutralization of special elements. A low-privileged attacker with local access could potentially execute arbitrary OS commands and achieve privilege escalation. Multiple connected so...

7.8CVSS6.8AI score0.0055EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/28 1:28 a.m.27 views

CVE-2024-49565

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS0.0055EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/28 1:24 a.m.67 views

CVE-2025-24383

Dell Unity OS Command Injection (CVE-2025-24383) affects Dell Unity software 5.4 and earlier. An unauthenticated, remotely accessible attacker can exploit an improper neutralization of special elements in OS commands to delete arbitrary files, including critical system files. Multiple sources (CV...

9.1CVSS9.3AI score0.01273EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/28 1:24 a.m.6 views

CVE-2025-24383

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is...

9.1CVSS7.5AI score0.01273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/28 1:24 a.m.22 views

CVE-2025-24383

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is...

9.1CVSS0.01273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/28 12:00 a.m.32 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

0.11622EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 12:00 a.m.9 views

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

8.1AI score0.11622EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/28 12:00 a.m.7 views

PT-2025-13429 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...

7.8CVSS7.4AI score0.0055EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/03/28 12:00 a.m.17 views

PT-2025-13419 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow an unauthenticated attacker with remote access...

7.3CVSS7.3AI score0.0127EPSS
SaveExploits0References10
Rows per page
Query Builder