CVE-2023-47567

CVE-2023-47567 is an OS command injection affecting multiple QNAP OS lines. The vulnerability could allow authenticated administrators to execute commands over the network. Public artifacts list fixes in specific releases: QTS 5.1.5.2645 build 20240116 and later; QTS 4.5.4.2627 build 20231225 and...

CVE-2023-47567 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645...

CVE-2023-47566 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645...

CVE-2023-47566

CVE-2023-47566 is an OS command injection affecting several QNAP OS versions (QTS, QuTS hero, QuTScloud). The vulnerability could allow authenticated administrators to execute commands over the network. The specification provides concrete fixes: QTS 5.1.5.2645 build 20240116 and later; QuTS hero ...

CVE-2023-47562 Photo Station

An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 2023/12/15 and later...

CVE-2023-47562

CVE-2023-47562 affects QNAP Photo Station. It is an OS command injection vulnerability that could allow an authenticated user to execute commands over the network. Root cause: an insecure handling in the Photo Station component enabling command execution by network inputs. Impact is high (confide...

CVE-2023-45025 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later...

CVE-2023-45025

CVE-2023-45025 is an OS command injection affecting QNAP QTS and QuTS Hero/QS Cloud products. Affected versions include QTS 5.1.4.2596+ (build 20231128+), QTS 4.5.4.2627+ (build 20231225+), QuTS Hero h5.1.4.2596+ (build 20231128+), QuTS Hero h4.5.4.2626+ (build 20231225+), and QuTScloud c5.1.5.26...

CVE-2023-41283

Summary of CVE-2023-41283 (QNAP OS command injection) : An OS command injection vulnerability affecting multiple QNAP OS versions has been reported. If exploited, authenticated administrators could execute commands over the network. The issue has been fixed in: QTS 5.1.4.2596 build 20231128 and l...

CVE-2023-41283 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596...

CVE-2023-41282

CVE-2023-41282 is an OS command injection affecting QNAP QTS, QuTS hero, and QuTScloud. The vulnerability could allow an authenticated administrator to execute commands via a network. Affected versions have been fixed in QTS 5.1.4.2596 build 20231128 and later, QuTS hero h5.1.4.2596 build 2023112...

CVE-2023-41281

CVE-2023-41281 is an OS command injection vulnerability affecting QNAP QTS, QuTS hero, and QuTScloud. Authenticated administrators could execute commands over the network on affected OS versions. QNAP reports fixes in QTS 5.1.4.2596 build 20231128 and later, QuTS hero h5.1.4.2596 build 20231128 a...

CVE-2023-39297

CVE-2023-39297 is an OS command injection affecting several QNAP OS versions. The root cause is command execution via the network by authenticated users. Impact is high: confidentiality, integrity, and availability are all rated high (CVSS v3.1: 8.8). Affected products include QTS and QuTS Hero/C...

CVE-2023-39302

CVE-2023-39302 is an OS command injection vulnerability in several QNAP OS versions. Affected products include QTS, QuTS hero, and QuTScloud. The root cause is command execution via the network by an authenticated administrator. Impact is described as high in CVSS terms; exploitation requires net...

CVE-2023-6078

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution...

CVE-2023-6078 OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution...

CVE-2023-6078 OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution...

CVE-2023-6078

CVE-2023-6078 describes an OS command injection in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. An attacker can upload a specially crafted Perl script, leading to arbitrary command execution on affected systems. Affected software: BIOVIA Materials Studio ...

Oracle Linux 8 : openssh (ELSA-2024-0606)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0606 advisory. - Forbid shell metasymbols in username/hostname Resolves: CVE-2023-51385 Tenable has extracted the preceding description block directly from the Oracle...

CVE-2024-1115

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of the file /application/websocket/controller/Setting.php. The manipulation of the argument phpPath leads to os command injection. The attack may be initiated remotely. The exploit h...