Lucene search
+L

250 matches found

osv_cve
osv_cve
•added 2020/05/15 5:15 p.m.•27 views

CVE-2020-12834

eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...

9.8CVSS7.4AI score0.11072EPSS
SaveExploits1References1
Veracode
Veracode
•added 2019/11/08 1:03 a.m.•23 views

Malicious Package

sj-tw-abc is a malicious package that downloads and runs a script that opens a reverse shell in the system...

3.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/18 12:00 a.m.•19 views

eQ-3 Homematic CCU3 Remote Code Execution Vulnerability (CNVD-2020-14281)

The eQ-3 Homematic CCU3 is a central control unit for smart home systems from eQ-3 Germany. A remote code execution vulnerability exists in the ReGa.runScript method in the eQ-3 Homematic CCU3 using firmware version 3.41.11, which can be exploited by an attacker to execute code and compromise the...

9CVSS8.3AI score0.15555EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2019/10/17 2:15 p.m.•25 views

CVE-2019-15850

eQ-3 HomeMatic CCU3 firmware version 3.41.11 allows Remote Code Execution in the ReGa.runScript method. An authenticated attacker can easily execute code and compromise the system...

8.8CVSS7.5AI score0.15555EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2019/08/29 3:15 p.m.•18 views

CVE-2019-4133

IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side with access to client computer to run a custom script. IBM X-Force ID: 158278...

5.2CVSS6AI score0.0032EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/07/19 7:15 a.m.•19 views

CVE-2019-13971

OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request...

6.1CVSS6.3AI score0.00848EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2017/04/13 7:59 p.m.•22 views

CVE-2016-8726

An exploitable null pointer dereference vulnerability exists in the Web Application /forms/webrunScript iwfilename functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. An HTTP POST request with a blank line in the header will cause a segmentation fault in the web server...

7.5CVSS5.8AI score0.01405EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/02 12:00 a.m.•9 views

CVE-2012-4110: Improper Input Validation

run-script in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560...

6.8CVSS5.8AI score0.00346EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/10/02 12:00 a.m.•10 views

PT-2013-1648

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to gain privileges by embedding commands in an unspecified parameter in the run-script of the fabric-interconnect component...

6.8CVSS5.8AI score0.00346EPSS
SaveExploits0References2
Veeam
Veeam
•added 2011/12/14 12:00 a.m.•33 views

How to Edit Multiple Alarms at the Same Time

Purpose This article provides supplemental information regarding batch alarm editing. As documented in the Veeam ONE Monitoring Guide, in batch editing mode, you can only change the Assignment, Notifications, Actions, and Suppression alarm settings. Solution For information about modifying multip...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder