Design/Logic Flaw

A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

Command injection

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

CVE-2022-43550

CVE-2022-43550 concerns the Jitsi Desktop/Windows flow where, before commit 8aa7be58522f4264078d54752aae5483bfd854b2, launching browsers on Windows could be coerced into loading an arbitrary URL, enabling a command-injection that could lead to remote code execution. Affected software is Jitsi whe...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

CVE-2022-43550

A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution...

PT-2023-14253 · Jitsi · Jitsi

Name of the Vulnerable Software and Affected Versions: Jitsi versions prior to commit 8aa7be58522f4264078d54752aae5483bfd854b2 Description: A command injection issue exists when launching browsers on Windows, allowing an attacker to insert an arbitrary URL, which could lead to remote execution...

PT-2023-1710 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP Business Objects Business Intelligence Platform versions 420, 430 Description: The issue is related to the incorrect neutralization of special elements in output, which can lead to code injection. This could allow a remote attacker to...

Out-of-bounds

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code...

CVE-2023-0249 CVE-2023-0249

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code...

The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switches from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure when processing the Contact Information field in the Switch Information section. Exploiting this vulnerability allows an attacker to execute...

Delta Electronics DIAScreen Buffer Overflow Vulnerability (CNVD-2023-08070)

A buffer overflow vulnerability exists in Delta Electronics DIAScreen 1.2.1.23 and prior versions, which is caused by an improperly restricted operation in memory. The vulnerability is caused by an improperly restricted operation in memory, resulting in a buffer overflow that can be exploited to...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12621)

Dell PowerScale OneFS is a U.S. based Dell Dell company that provides the PowerScale OneFS operating system for scale-out NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by remote, unauthenticated attackers to cause information disclosure and remote execution...

CVE-2023-24576

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service nsrexecd irrespective of any auth used...

CVE-2021-37375

Cross Site Scripting XSS vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

CVE-2023-25135

vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verifyserialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions a...

Security Bulletin: Vulnerability in Node.js lodash affects IBM Process Mining (CVE-2021-23337,CVE-2020-28500)

Summary There is a vulnerability in Node.js lodash that could allow remote execution of arbitrary commands. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2021-23337 DESCRIPTION: Node.js...

Design/Logic Flaw

NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting...

CVE-2022-45101

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution...