Lucene search
+L

810 matches found

CVE
CVE
•added 2018/05/09 8:00 p.m.•77 views

CVE-2017-14475

MMM Agent (mmm_agentd) 2.2.1 for Linux is affected by multiple shell command injection flaws in the MMM::Agent::Helpers::Network::add_ip and related code paths. A specially crafted MMM protocol message can inject commands via untrusted role IP input passed through configure_ip/add_ip/clear_ip and...

10CVSS9.7AI score0.0607EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2018/05/09 8:00 p.m.•42 views

CVE-2017-14480

In the MMM::Agent::Helpers::Network::clearip function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1 for FreeBSD, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An...

9.8CVSS9.8AI score0.05991EPSS
SaveExploits2References1
CVE
CVE
•added 2018/05/09 8:00 p.m.•74 views

CVE-2017-14476

CVE-2017-14476 affects MySQL MMM MMM agent (mmm_agentd) v2.2.1. Multiple remote command-injection vulnerabilities exist in the MMM Agent helpers, notably in MMM::Agent::Helpers::Network::add_ip(), with variants across Linux, Solaris, and FreeBSD, plus related helpers (clear_ip, check_ip) and _exe...

10CVSS9.7AI score0.05991EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2018/05/09 8:00 p.m.•45 views

CVE-2017-14475

In the MMM::Agent::Helpers::Network::addip function in MySQL Multi-Master Replication Manager MMM mmmagentd 2.2.1 for Linux, a specially crafted MMM protocol message can cause a shell command injection resulting in arbitrary command execution with the privileges of the mmm\agentd process. An...

9.8CVSS9.8AI score0.0607EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•14 views

PT-2018-5670 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

10CVSS9.8AI score0.0607EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•16 views

PT-2018-5675 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the clear ip function, resulting in arbitrary command execution with the privileg...

10CVSS9.6AI score0.05991EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•10 views

PT-2018-5676 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the MMM::Agent::Helpers::Network::send arp function, resulting in arbitrary comma...

10CVSS9.6AI score0.05773EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2018/05/09 12:00 a.m.•17 views

PT-2018-5673 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the clear ip function, resulting in arbitrary command execution with the privileg...

10CVSS9.8AI score0.05991EPSS
SaveExploits2References3
Packet Storm
Packet Storm
•added 2018/05/03 12:00 a.m.•201 views

Exim base64d Remote Code Execution

!/usr/bin/python import time import socket import struct s = None f = None def logo: print print " CVE-2018-6789 Poc Exploit" print "@straightblast ; [email protected]" print def connecthost, port: global s global f s = socket.createconnectionhost,port f = s.makefile'rw', bufsize=0 def p...

7.5CVSS0.1AI score0.82137EPSS
SaveExploits19
OSV
OSV
•added 2018/03/01 8:29 p.m.•29 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS8.2AI score
SaveExploits0References3
NVD
NVD
•added 2018/03/01 8:29 p.m.•22 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS8.1AI score0.02295EPSS
SaveExploits0References3
OSV
OSV
•added 2018/03/01 8:29 p.m.•18 views

UBUNTU-CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS7.2AI score0.02295EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/03/01 8:29 p.m.•29 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS7.2AI score0.02295EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/03/01 7:00 p.m.•122 views

CVE-2017-9274

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

9.3CVSS8.2AI score0.02295EPSS
SaveExploits0
Cvelist
Cvelist
•added 2018/03/01 7:00 p.m.•44 views

CVE-2017-9274 osc executes spec code during "osc commit"

A shell command injection in the obs-service-sourcevalidator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs...

7.8CVSS8AI score0.02295EPSS
SaveExploits0References3
CVE
CVE
•added 2018/03/01 7:00 p.m.•68 views

CVE-2017-9274

CVE-2017-9274 describes a shell command injection in the OpenBuild/OpenSUSE component obs-service-source_validator (before version 0.7 ). The underlying issue allows an attacker to execute arbitrary code as the packager when validating RPM SPEC files that use specific macro constructs. Multiple c...

9.3CVSS8AI score0.02295EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2017/11/17 8:29 p.m.•35 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10CVSS10AI score0.06467EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2017/11/17 8:00 p.m.•43 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10AI score0.06467EPSS
SaveExploits0References4
CVE
CVE
•added 2017/11/17 8:00 p.m.•64 views

CVE-2017-1000215

CVE-2017-1000215 affects ROOT xrootd versions 4.6.0 and earlier, exposing an unauthenticated shell command injection that enables remote code execution. The vulnerability is documented across multiple advisories (NVD, SUSE, Gentoo GLSA) indicating remote code execution via a shell command injecti...

10CVSS10AI score0.06467EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2017/11/17 8:00 p.m.•68 views

CVE-2017-1000215

ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution...

10CVSS5.9AI score0.06467EPSS
SaveExploits0
Rows per page
Query Builder