8550 matches found
CVE-2023-44291
Dell PowerProtect Data Manager DM5500 (v5.14.0.0) is affected by an OS command injection in the PPOE component. The root cause is improper neutralization of special characters in commands, allowing a remote, high-privilege attacker with network access to run arbitrary OS commands on the underlyin...
PT-2023-9076 · Sonicwall · Sonicwall Sma100
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions prior to 10.2.1.10-62sv Description: The issue is related to the improper neutralization of special elements in the SMA100 SSL-VPN management interface, allowing a remote authenticated attacker with administrative...
CVE-2023-3741
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...
CVE-2023-3741
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...
CVE-2023-3741
The CVE-2023-3741 entry describes an OS command injection vulnerability in NEC Platforms DT900 and DT900S Series IP phones (all versions), allowing an attacker to execute arbitrary commands on the device. According to connected sources, exploitation is possible over the network with no privileges...
CVE-2023-3741
An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...
INEA ME RTU Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-35762)
Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system OS command injection, which could allow remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...
CVE-2023-6201
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection.This issue affects Panorama: before 8.0...
CVE-2023-6201
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...
CVE-2023-6201
The CVE-2023-6201 issue is a Command Injection vulnerability in Univera Computer System Panorama. Affected software: Panorama before version 8.0. Root cause: Improper neutralization of special elements used in OS commands, enabling injection. Impact described in sources: severities align with hig...
CVE-2023-6201 Command Injection in Univera Panorama Framework
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...
CVE-2023-6201 Command Injection in Univera Panorama Framework
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
CVE-2011-2523-poc This is a python3 script to exploit the CVE...
SmartNode SN200 3.21.2-23021 OS Command Injection Vulnerability
Product: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway Manufacturer: Patton LLC Affected Versions: = 3.21.2-23021 Tested Versions: 2.21.1-22041, 3.21.2-23021, 3.22.0-23083 Vulnerability Type: OS Command Injection CWE-78 Vulnerability Type: Improper Access Control CWE-284 Risk Level:...
PT-2023-32565
Name of the Vulnerable Software and Affected Versions Univera Computer System Panorama versions prior to 8.0 Description The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This means...
SmartNode SN200 3.21.2-23021 OS Command Injection
Advisory ID: SYSS-2023-019 Product: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway Manufacturer: Patton LLC Affected Versions: = 3.21.2-23021 Tested Versions: 2.21.1-22041, 3.21.2-23021, 3.22.0-23083 Vulnerability Type: OS Command Injection CWE-78 Vulnerability Type: Improper Access...
CVE-2023-6309
A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...
Command injection
A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...
CVE-2023-6309 moses-smt mosesdecoder trans_result.php os command injection
A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...
CVE-2023-6304 Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goformgetcmdprocess of the component Ping Tool. The manipulation of the argument url leads to os...