15563 matches found
PT-2023-7057
Name of the Vulnerable Software and Affected Versions Quantum HD Unity products affected versions not specified Quantum HD Unity Compressor affected versions not specified Quantum HD Unity AcuAir affected versions not specified Quantum HD Unity Engine Room affected versions not specified Quantum ...
Vulnerability of QuTS hero, QTS, and QuTScloud network devices: commands that allow attackers to execute arbitrary commands
The vulnerability of the QuTS hero, QTS, and QuTScloud network devices from operating systems is related to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
command injection in scp.c
The scp functionality in OpenSSH is vulnerable to command injection via backtick characters in the destination argument. The command will be run with the permissions of the user with which the files were copied on the remote server. To exploit this issue an attacker must manipulate a system...
Cisco IOS XE Unauthenticated Remote Command Execution (CVE-2023-20198) (Direct Check)
Binary data ciscoiosxeCVE-2023-20198directcheck.nbin...
GHSA-2X28-C7J7-23GV Subrion remote command execution vulnerability
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
Subrion remote command execution vulnerability
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
CVE-2023-46947
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
Design/Logic Flaw
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
CVE-2023-46947
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
PT-2023-30267 · Subrion · Subrion
Name of the Vulnerable Software and Affected Versions: Subrion version 4.2.1 Description: The issue is a remote command execution vulnerability located in the backend. Recommendations: For Subrion version 4.2.1, at the moment, there is no information about a newer version that contains a fix for...
CVE-2023-46947
Subrion 4.2.1 has a remote command execution vulnerability in the backend...
PT-2023-6738 · Qnap · Qts +2
Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.0.1.2376 build 20230421 QTS versions prior to 4.5.4.2374 build 20230416 QuTS hero versions prior to h5.0.1.2376 build 20230421 QuTS hero versions prior to h4.5.4.2374 build 20230417 QuTScloud versions prior to...
CVE-2023-46947
CVE-2023-46947 affects Subrion CMS, specifically version 4.2.1, with a remote command execution weakness in the backend. The connected sources confirm the vulnerability exists in Subrion 4.2.1 and reiterate backend RCE, but the documents do not provide concrete root-cause details, affected module...
Atlassian Confluence Data Center and Server broken access control
Added: 11/02/2023 Background Atlassian Confluence is a collaboration and knowledge management application. Problem Broken access control in Atlassian Confluence Data Center and Server could allow a remote attacker to create an administrator account, leading to remote command execution. Resolution...
The vulnerability of the nginx.ingress.kubernetes.io/permanent-redirect controller in the Kubernetes ingress-nginx cluster allows a attacker to execute arbitrary commands.
The vulnerability of the nginx.ingress.kubernetes.io/permanent-redirect controller in the Kubernetes ingress-nginx cluster is related to errors in processing incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2023-1714 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
Unsafe variable extraction in bitrix/modules/main/classes/general/useroptions.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via 1 appending arbitrary content to existing PHP files or 2 PHAR deserialization...
CVE-2023-1714 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
Unsafe variable extraction in bitrix/modules/main/classes/general/useroptions.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via 1 appending arbitrary content to existing PHP files or 2 PHAR deserialization...
CVE-2023-1713 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file...
CVE-2023-1713 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file...
