Amazon Linux 2 : patch (ALAS-2019-1317)

doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 , but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.CVE-2018-20969 GNU patch through 2.7.6 is vulnerable to OS shell...

CVE-2019-13652

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection issue 4 of 5...

CVE-2019-13651

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection issue 3 of 5...

CVE-2019-13653

The CVE-2019-13653 entry applies to TP-Link M7350 devices up to and including firmware 1.0.16 Build 181220 Rel.1116n. The vulnerability is a triggerPort OS Command Injection in TP-Link M7350, allowing execution of OS commands (root cause not explicitly detailed in provided documents). Connected s...

CVE-2019-13653

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection issue 5 of 5...

CVE-2019-13652

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection issue 4 of 5...

CVE-2019-13652

CVE-2019-13652 affects TP-Link M7350 devices running firmware up to 1.0.16 Build 181220 Rel.1116n. The issue is a serviceName OS Command Injection , enabling an attacker to execute OS commands on the device. Public sources in the connected documents consistently describe this vulnerability as a h...

CVE-2019-13651

The CVE-2019-13651 entry covers TP-Link M7350 devices with firmware up to 1.0.16 Build 181220 Rel.1116n. The vulnerability is a portMappingProtocol OS Command Injection in the device’s web interface, enabling an attacker to execute arbitrary OS commands. Affected component: portMappingProtocol ha...

CVE-2019-13650

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection issue 2 of 5...

CVE-2019-13650

CVE-2019-13650 affects TP-Link M7350 mobile routers. The connected sources describe an internalPort OS Command Injection vulnerability in TP-Link M7350 devices running 1.0.16 Build 181220 Rel.1116n and earlier, allowing an attacker to execute OS commands on the device. CVSS metrics from NVD indic...

CVE-2019-13649

CVE-2019-13649 affects TP-Link M7350 mobile routers. According to multiple sources, including NVD and CNVD/Red Hat records, devices running firmware up to 1.0.16 Build 181220 Rel.1116n expose an externalPort parameter that allows OS command injection, enabling an attacker to execute commands with...

CVE-2019-13649

TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection issue 1 of 5...

Important: patch

Issue Overview: doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.CVE-2018-20969 GNU patch through 2.7.6 is vulnerab...

Sonatype Nexus Repository Manager CVE-2019-15588 OS Command Injection Vulnerability

Description Sonatype Nexus Repository Manager is prone to an OS command-injection vulnerability. An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks. Versions prior to Nexus Repository Manager...

OS Command Injection

centreon/centreon is vulnerable to OS command injection. Lack of sanitization allows an attacker to inject and execute arbitrary OS commands on the system in minPlayCommand.php...

JVN#95875796: Multiple OS command injection vulnerabilities in DBA-1510P

DBA-1510P provided by D-Link Japan K.K. contains multiple OS command injection vulnerabilities listed below. OS command injection vulnerability in Command Line Interface CLI CWE-78 - CVE-2019-6013 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score...

OS Command Injection

patch is vulnerable to OS command injection. An attacker is able to execute arbitrary OS commands through patch using a malicious patch file containing ed style diff payload with shell metacharacters...

Exploit for OS Command Injection in Jenkins Git_Client

CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-20...

Exploit for OS Command Injection in Sonatype Nexus_Repository_Manager

CVE-2019-5475-Nexus-Repository-Manager- Payload PUT /...

EulerOS 2.0 SP3 : libarchive (EulerOS-SA-2019-2014)

According to the versions of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an...