CVE-2013-4987

PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...

Command injection

PineApp Mail-SeCure before 3.70 allows remote authenticated users to gain privileges by leveraging console access and providing shell metacharacters in a "system ping" command...

CVE-2012-4076

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

CVE-2012-4076

CVE-2012-4076 affects Cisco NX-OS with a local-privilege escalation via shell metacharacters in a call to the system() library function. The issue arises from improper input handling during command processing (Bug IDs CSCtf23559 and CSCtf27780). Public sources describe that an authenticated, loca...

CVE-2012-4076

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in a command that calls the system library function, aka Bug IDs CSCtf23559 and CSCtf27780...

Code injection

The self.rungpg function in lib/rgpg/gpghelper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

CVE-2013-4203

The CVE-2013-4203 issue affects the Ruby gem rgpg (self.run_gpg in lib/rgpg/gpg_helper.rb). It allows remote command execution via shell metacharacters because user input is not sanitized before passing to system(), affecting versions up to 0.2.2. The vulnerability can enable arbitrary commands o...

CVE-2013-2578

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

Code injection

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

CVE-2013-2578

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

CVE-2012-4075

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

Command injection

Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788...

CVE-2012-4075

Cisco NX-OS contains an input-parsing vulnerability where parameters including special characters (e.g., back quotes) can be manipulated by an authenticated, local attacker to gain root-privilege access and execute arbitrary shell commands. This is associated with Bug IDs CSCtf19827 and CSCtf2778...

CVE-2013-4984

The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...

CVE-2013-4983

The getreferers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php...

Design/Logic Flaw

The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...

CVE-2013-4984

The closeconnections function in /opt/cma/bin/clearkeys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument...

CVE-2013-4983

CVE-2013-4983 affects Sophos Web Protection Appliance via the sblistpack component (get_referers) in /opt/ws/bin/sblistpack. Versions affected: pre-3.7.9.1 and pre-3.8.1.1 (i.e., 3.7.9.1 and 3.8.1.1 patched). The vulnerability allows remote command execution by injecting shell metacharacters into...

Design/Logic Flaw

The web interface in the Intelligent Platform Management Interface IPMI implementation on Supermicro H8DC, H8DG, H8SCM-F, H8SGL-F, H8SM, X7SP, X8DT, X8SI, X9DAX-, X9DB, X9DR, X9QR, X9SBAA-F, X9SC, X9SPU-F, and X9SR devices allows remote authenticated users to execute arbitrary commands via shell...

CVE-2013-3608

The web interface in the Intelligent Platform Management Interface IPMI implementation on Supermicro H8DC, H8DG, H8SCM-F, H8SGL-F, H8SM, X7SP, X8DT, X8SI, X9DAX-, X9DB, X9DR, X9QR, X9SBAA-F, X9SC, X9SPU-F, and X9SR devices allows remote authenticated users to execute arbitrary commands via shell...