RHEL 7 : openssh (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssh: User enumeration via malformed packets in authentication requests CVE-2018-15919 - openssh:...

CVE-2024-4582 Faraday GM8181/GM828x NTP Service os command injection

A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntpsrv leads to os command injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-4582 Faraday GM8181/GM828x NTP Service os command injection

A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknown function of the component NTP Service. The manipulation of the argument ntpsrv leads to os command injection. It is possible to launch the attack remotely. The exploit has bee...

CVE-2024-4582

The CVE-2024-4582 entry concerns Faraday GM8181 and GM828x devices, where an unknown function in the NTP Service is vulnerable to command injection via manipulation of the ntp_srv argument. This enables remote attack capability and, per the description, exploits have been disclosed publicly and u...

VulnCheck KEV: CVE-2021-21872

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

OS Command Injection

sagemaker is vulnerable to OS Command Injection. The vulnerability is due to the capturedependencies function in the sagemaker.serve.saveretrive.version100.save.utils module. An attacker can execute arbitrary code or cause a denial of service by passing an inappropriate command as the...

CVE-2024-4508

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/staticrouteeditipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command injection. It is...

CVE-2024-4509

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...

CVE-2024-4510 Ruijie RG-UAC arp_add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/networkConfig/ArpTable/arpaddcommit.php. The manipulation of the argument textipaddr/textmacaddr leads to os command injection. The atta...

CVE-2024-4510 Ruijie RG-UAC arp_add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/networkConfig/ArpTable/arpaddcommit.php. The manipulation of the argument textipaddr/textmacaddr leads to os command injection. The atta...

CVE-2024-4510

Ruijie RG-UAC up to 20240428 is affected by an OS command injection in the file /view/networkConfig/ArpTable/arp_add_commit.php, triggered by manipulating the text_ip_addr/text_mac_addr arguments. Exploitation can occur remotely and has been disclosed publicly. Effective root cause: improper hand...

CVE-2024-4509 Ruijie RG-UAC add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...

CVE-2024-4509 Ruijie RG-UAC add_commit.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/addcommit.php. The manipulation of the argument ipaddr/macaddr leads to os command injection. The attack can be...

CVE-2024-4509

CVE-2024-4509 affects Ruijie RG-UAC up to 20240428. The vulnerability is an OS command injection in the PHP endpoint /view/IPV6/naborTable/add_commit.php, triggered by manipulating the ip_addr/mac_addr arguments. It can be exploited remotely, and public disclosure of the exploit is noted. Affecte...

CVE-2024-4507

A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/staticrouteaddipv6.php. The manipulation of the argument textprefixlen/textgateway/devname leads to os command injection. The...

CVE-2024-4508 Ruijie RG-UAC static_route_edit_ipv6.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/staticrouteeditipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command injection. It is...

CVE-2024-4508

Summary of CVE-2024-4508 (Ruijie RG-UAC) : A critical OS command injection vulnerability exists in Ruijie RG-UAC up to 20240428, affecting an unknown function in the file /view/IPV6/ipv6StaticRoute/static_route_edit_ipv6.php. Manipulating the parameters oldipmask, oldgateway, or olddevname can tr...

CVE-2024-4507 Ruijie RG-UAC static_route_add_ipv6.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/staticrouteaddipv6.php. The manipulation of the argument textprefixlen/textgateway/devname leads to os command injection. The...

CVE-2024-4507 Ruijie RG-UAC static_route_add_ipv6.php os command injection

A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/staticrouteaddipv6.php. The manipulation of the argument textprefixlen/textgateway/devname leads to os command injection. The...

CVE-2024-4505

A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ipaddraddcommit.php. The manipulation of the argument prelen/ethname leads to os command injection. It is possible to initiate the attack...