CVE-2022-24725 Exposure of home directory through shescape on Unix with Bash

Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when using Bash with the escape or escapeAll functions from the shescape API with the interpolation option set to true. Other tested shells, Dash and Zs...

IBM Flash System 900 has unspecified vulnerabilities

Ibm Flash System 900 is a fully optimized all-flash storage array from Ibm, Inc. Used to accelerate business growth, the IBM Flash System 900 has a security vulnerability that stems from a shell escape vulnerability in the IBM Flash System 900. An attacker could exploit the vulnerability to obtai...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

Code injection

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

CVE-2021-37471: Undefined Security Weakness

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

Cradlepoint IBR900-600 安全漏洞

The Cradlepoint IBR900-600 is a router from Cradlepoint USA. A security vulnerability exists in the Cradlepoint IBR900-600 that stems from a restricted shell escape sequence that may exist on Cradlepoint IBR900-600 7.2.60 devices. An attacker could exploit the vulnerability to deny the availabili...

SUSE-SU-2021:3520-1 Security update for open-lldp

This update for open-lldp fixes the following issues: - CVE-2018-10932: Fixed an improper sanitization of shell-escape codes. bsc1104624...

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

Design/Logic Flaw

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

CVE-2021-29873

CVE-2021-29873 affects IBM FlashSystem 900 and related IBM storage products (SVC/Storwize/Spectrum Virtualize family). A authenticated user could escape a restricted shell to obtain sensitive information and cause a denial of service. The IBM Security Bulletin lists the affected platforms (FlashS...

CVE-2021-29873

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

CVE-2021-29873: Undefined Security Weakness

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229...

IBM Flash System 900 安全漏洞

Ibm Flash System 900 is a fully optimized all-flash storage array from Ibm, Inc. Used to accelerate business growth, the IBM Flash System 900 has a security vulnerability that stems from a shell escape vulnerability in the IBM Flash System 900. An attacker could exploit the vulnerability to obtai...

Design/Logic Flaw

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

CVE-2021-3540 Ivanti MobileIron Core clish Restricted Shell Escape via Argument Injection

By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0...

CVE-2021-3540

CVE-2021-3540 affects Ivanti MobileIron Core. The flaw allows escaping the restricted clish shell via the install rpm info detail command, effectively a clish argument-injection vulnerability. Consequence is elevated/possibly complete impact on confidentiality, integrity, and availability per NVD...

CVE-2021-3198

Ivanti MobileIron Core is affected by CVE-2021-3198: an attacker can escape the restricted clish shell by abusing the 'install rpm url' command. Vulnerable versions exist prior to 11.1.0.0; the issue was fixed in version 11.1.0.0. The root cause is command-based escape from the clish shell. Remed...