Lucene search
+L

8550 matches found

CVE
CVE
added 2023/12/04 8:13 a.m.50 views

CVE-2023-44291

Dell PowerProtect Data Manager DM5500 (v5.14.0.0) is affected by an OS command injection in the PPOE component. The root cause is improper neutralization of special characters in commands, allowing a remote, high-privilege attacker with network access to run arbitrary OS commands on the underlyin...

7.2CVSS7.3AI score0.01589EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.11 views

PT-2023-9076 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions prior to 10.2.1.10-62sv Description: The issue is related to the improper neutralization of special elements in the SMA100 SSL-VPN management interface, allowing a remote authenticated attacker with administrative...

9.1CVSS8.3AI score0.99957EPSS
SaveExploits1References96
NVD
NVD
added 2023/11/30 1:15 a.m.26 views

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

9.8CVSS0.01484EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/30 12:55 a.m.13 views

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

7.6AI score0.01484EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 12:55 a.m.52 views

CVE-2023-3741

The CVE-2023-3741 entry describes an OS command injection vulnerability in NEC Platforms DT900 and DT900S Series IP phones (all versions), allowing an attacker to execute arbitrary commands on the device. According to connected sources, exploitation is possible over the network with no privileges...

9.8CVSS9.6AI score0.01484EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 12:55 a.m.38 views

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

9.9AI score0.01484EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/29 12:00 a.m.20 views

INEA ME RTU Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-35762)

Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system OS command injection, which could allow remote code execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

9.9CVSS8.4AI score0.01698EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/28 12:15 p.m.12 views

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection.This issue affects Panorama: before 8.0...

8.8CVSS5.8AI score0.01608EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/28 12:15 p.m.22 views

CVE-2023-6201

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

8.8CVSS0.01608EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/28 11:32 a.m.51 views

CVE-2023-6201

The CVE-2023-6201 issue is a Command Injection vulnerability in Univera Computer System Panorama. Affected software: Panorama before version 8.0. Root cause: Improper neutralization of special elements used in OS commands, enabling injection. Impact described in sources: severities align with hig...

8.8CVSS7.3AI score0.01608EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/28 11:32 a.m.12 views

CVE-2023-6201 Command Injection in Univera Panorama Framework

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

8.8CVSS7.3AI score0.01608EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/11/28 11:32 a.m.29 views

CVE-2023-6201 Command Injection in Univera Panorama Framework

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0...

8.8CVSS9AI score0.01608EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2023/11/28 10:52 a.m.216 views

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

CVE-2011-2523-poc This is a python3 script to exploit the CVE...

10CVSS7.3AI score0.96184EPSS
SaveExploits45
zdt
zdt
added 2023/11/28 12:00 a.m.372 views

SmartNode SN200 3.21.2-23021 OS Command Injection Vulnerability

Product: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway Manufacturer: Patton LLC Affected Versions: = 3.21.2-23021 Tested Versions: 2.21.1-22041, 3.21.2-23021, 3.22.0-23083 Vulnerability Type: OS Command Injection CWE-78 Vulnerability Type: Improper Access Control CWE-284 Risk Level:...

9.8CVSS9.7AI score0.64754EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2023/11/28 12:00 a.m.13 views

PT-2023-32565

Name of the Vulnerable Software and Affected Versions Univera Computer System Panorama versions prior to 8.0 Description The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This means...

8.8CVSS7.4AI score0.01608EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2023/11/28 12:00 a.m.518 views

SmartNode SN200 3.21.2-23021 OS Command Injection

Advisory ID: SYSS-2023-019 Product: SmartNode SN200 Analog Telephone Adapter ATA & VoIP Gateway Manufacturer: Patton LLC Affected Versions: = 3.21.2-23021 Tested Versions: 2.21.1-22041, 3.21.2-23021, 3.22.0-23083 Vulnerability Type: OS Command Injection CWE-78 Vulnerability Type: Improper Access...

9.8CVSS7.4AI score0.64754EPSS
SaveExploits3
NVD
NVD
added 2023/11/27 2:15 a.m.33 views

CVE-2023-6309

A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...

9.8CVSS0.04158EPSS
SaveExploits1References3
Prion
Prion
added 2023/11/27 2:15 a.m.22 views

Command injection

A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...

5.2CVSS7.7AI score0.04158EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/27 1:31 a.m.18 views

CVE-2023-6309 moses-smt mosesdecoder trans_result.php os command injection

A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/transresult.php. The manipulation of the argument input1 leads to os command injection. The exploit has been disclosed to the public and may b...

5.5CVSS7.4AI score0.04158EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/11/27 12:31 a.m.41 views

CVE-2023-6304 Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goformgetcmdprocess of the component Ping Tool. The manipulation of the argument url leads to os...

8.3CVSS8.4AI score0.09521EPSS
SaveExploits1References3
Rows per page
Query Builder