CVE-2022-39819

CVE-2022-39819 affects NOKIA 1350 OMS R14.2, with OS command injection vulnerabilities that allow authenticated users to execute OS commands. The connected PT-2022-25013 entry provides concrete technical details: the issue occurs via the /cgi-bin/R14.2/log.pl endpoint (cmd parameter) and the /cgi...

CVE-2022-36779

CVE-2022-36779 affects PROSCEND industrial routers (M330-W, M330-W5, M350-5G, M350-W5G, M350-6, M350-W6, M301-G, M301-GW, and ICR 111WG). Descriptions in connected sources confirm an unauthenticated OS command injection vulnerability in Proscend firmware, enabling arbitrary command execution if a...

CVE-2022-36779 PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router with GPS4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG /...

NOKIA 1350 OMS 操作系统命令注入漏洞

NOKIA 1350 OMS is an optical management system from Nokia Finland. An operating system command injection vulnerability exists in NOKIA 1350 OMS version R14.2 that originates from allowing an unauthenticated user to execute commands on the operating system...

CVE-2022-3133

OS Command Injection in GitHub repository jgraph/drawio prior to 20.3.0...

CVE-2022-3133

CVE-2022-3133 affects the jgraph/drawio project prior to 20.3.0. The issue is an OS command injection caused by improper neutralization of input data in command construction. The vulnerability is labeled as high risk (CVSS base score 7.8/NVD; 7.0 in some metrics) with a local attack vector and us...

CVE-2022-29061

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests...

CVE-2022-29061

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests...

Command injection

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests...

CVE-2022-29061

Fortinet FortiSOAR is affected by CVE-2022-29061, an OS Command Injection caused by improper neutralization of special elements. An authenticated attacker can execute arbitrary commands via crafted HTTP GET requests. Affected: FortiSOAR versions prior to 7.2.1. CVSSv3.1 base score 7.2 (HIGH); att...

SUSE SLES12 Security Update : rubygem-rake (SUSE-SU-2022:3212-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3212-1 advisory. - CVE-2020-8130: Fixed a command injection when supplying a filename that began with the pipe character bsc1164804. Tenable has extracted th...

CVE-2022-35273

OS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote authenticated attacker to execute an arbitrary OS command...

CVE-2022-38094

CVE-2022-38094 is an OS command injection vulnerability in the Telnet function of CentreCOM AR260S V2 firmware prior to Ver. 3.3.7. The issue allows a remote authenticated attacker to execute arbitrary OS commands. Red Hat, NVD, JVN, and other connected records corroborate the condition and impac...

CVE-2022-35273

CVE-2022-35273 describes an OS command injection in the GUI setting page of CentreCOM AR260S V2 firmware prior to Ver.3.3.7. A remote authenticated attacker could execute arbitrary OS commands due to the vulnerable GUI handling. Affected product: CentreCOM AR260S V2; vulnerable component: GUI set...

D-Link Multiple Routers OS Command Injection Vulnerability

Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands...

CVE-2022-34883

OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior t...

CVE-2022-34883

OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior t...

CVE-2022-34883

CVE-2022-34883 affects Hitachi RAID Manager Storage Replication Adapter (SRA) with an OS Command Injection vulnerability. Technical details across connected sources confirm vulnerable ranges: Windows builds 02.01.04–02.03.01 and 02.01.04 prior to 02.03.02; Windows/Docker builds 02.05.00 prior to ...

CVE-2022-34883 OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter

OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This issue affects: Hitachi RAID Manager Storage Replication Adapter 02.01.04 versions prior to 02.03.02 on Windows; 02.05.00 versions prior t...

Fortinet FortiWeb OS command injection due to direct input interpolation in API controllers (FG-IR-21-180)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-180 advisory. - A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWeb version 6.4....