1619 matches found
CVE-2015-7901
Infinite Automation Mango Automation versions 2.5.x–2.6.0 beta (builds prior to 430) contain an OS command injection vulnerability that can be exploited by an authenticated remote user to execute arbitrary commands. Affected component/issue is demonstrated by public exploit references (e.g., Expl...
CVE-2015-7901
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2015-7310
McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...
CVE-2015-7310
McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...
CVE-2015-7310: Improper Neutralization of Special Elements used in an OS Command
McAfee Enterprise Security Manager ESM, Enterprise Security Manager/Log Manager ESMLM, and Enterprise Security Manager/Receiver ESMREC before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before 9.5.0MR7 allow remote authenticated users to execute arbitrary OS commands via a crafted filename, which...
CVE-2015-4330
Cisco TelePresence Video Communication Server Expressway X8.5.2 contains a local file script vulnerability that lets an authenticated, local attacker gain elevated OS-command execution by supplying invalid parameters to a local script. Root cause is insufficient protection of the local script, en...
CVE-2015-4330
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
PT-2015-6519
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS Expressway version X8.5.2 Description A local file script issue allows local users to gain privileges for OS command execution via invalid parameters. Recommendations For Cisco TelePresence Vid...
CVE-2015-4330: Improper Neutralization of Special Elements used in an OS Command
A local file script in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556...
PT-2015-1964
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server version X8.5.2 Description The issue allows remote authenticated users to execute arbitrary OS commands via crafted HTTP requests. This is due to insufficient input validation in the device's...
CVE-2015-2980: Improper Neutralization of Special Elements used in an OS Command
The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document...
CVE-2015-2979: Improper Neutralization of Special Elements used in an OS Command
Webservice-DIC yoyakuv41 allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2015-4237
The CLI parser in Cisco NX-OS 4.12E11, 6.211b, 6.212, 7.20ZZ99.1, 7.20ZZ99.3, and 9.11SV13.1.8 on Nexus devices allows local users to execute arbitrary OS commands via crafted characters in a filename, aka Bug IDs CSCuv08491, CSCuv08443, CSCuv08480, CSCuv08448, CSCuu99291, CSCuv08434, and...
CVE-2015-4186
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...
Input validation
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...
CVE-2015-4186
The CVE affects Cisco Virtualization Experience Client 6215 devices running firmware 11.2(27.4). The diagnostics subsystem of the administrative web interface does not properly sanitize input passed to a diagnostics option, enabling an authenticated, local attacker to execute arbitrary OS command...
CVE-2015-4183
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
CVE-2015-4183: Improper Neutralization of Special Elements used in an OS Command
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
CVE-2015-4186: Improper Neutralization of Special Elements used in an OS Command
The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience aka VXC Client 6215 devices with firmware 11.227.4 allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412...