8739 matches found
CVE-2020-7350
Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker can create a specially-crafted hostname or service name to b...
CVE-2020-9478
An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems...
Command injection
An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems...
CVE-2020-9478
An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems...
CVE-2020-9478
CVE-2020-9478 affects Rubrik 5.0.3-2296. The vulnerability is an OS command injection that permits an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems. Exploitation details, affected components beyond the product/version, and concrete remediation steps are not p...
OS Command Injection
clamscan is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands on the system via the isclamavbinary function in index.js...
CVE-2020-6765
CVE-2020-6765 affects D-Link DSL-GS225 J1 AU_1.0.4 where an admin can execute OS commands by placing shell metacharacters after a supported CLI command; the CLI is reachable via TELNET. The issue is a command-injection vulnerability in the device’s CLI parsing. The provided documents do not speci...
OS Command Injection
cacti is vulnerable to OS command injection. Multiple command injection flaws were discovered in Cacti. An authenticated user with certain administrative privileges could use these flaws to execute arbitrary commands on the Cacti server with the privileges of the web server user...
OS Command Injection
clamscan is vulnerable to OS Command Injection. The vulnerability exists through the isclamavbinary function in index.js...
OS Command Injection
apiconnect-cli-plugins is vulnerable to OS command injection. The vulnerability exists the values of pluginUri is not sanitized and can be controlled by users...
CVE-2020-11581
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
Command injection
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
CVE-2020-11581
An issue was discovered in Pulse Secure Pulse Connect Secure PCS through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, allows a man-in-the-middle attacker to perform OS command injection attacks against a client via shell...
OS Command Injection
node-key-sender is vulnerable to OS command injection. The vulnerability exists through the unsanitized value of arrParams used in exec...
OS Command Injection
effect is vulnerable to OS command injection. The vulnerability exists as it does not sanitize the value of cmd that used by exec...
OS Command Injection
install-package and umount are vulnerable to OS command injection. The vulnerabilities exists as the values of args were not sanitized when used in exec...
CVE-2020-5352
Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...
OS Command Injection
strong-nginx-controller is vulnerable to OS command injection. Lack of validation and sanitization of the action parameter allows an attacker to inject and execute arbitrary OS commands via the nginxCmd function...