5659 matches found
CVE-2020-14293
confdatetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field obtained from the web interface...
CVE-2020-14293: Improper Neutralization of Special Elements used in an OS Command
confdatetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field obtained from the web interface...
PT-2020-13960
Name of the Vulnerable Software and Affected Versions Secudos DOMOS version 5.8 Description The issue allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field, which can be obtained from the web interface. This is related to the conf datetime in...
GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156.
...
VulnCheck KEV: CVE-2008-4873
board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter during a downfile action...
PT-2020-6764
Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection vulnerability was discovered in the HNAP1 protocol. An attacker can execute arbitrary web scripts via shell metacharacters in the Captcha field to Login. This issue is related t...
PT-2020-14925
Name of the Vulnerable Software and Affected Versions USVN versions prior to 1.0.9 Description The issue allows remote code execution via shell metacharacters in the number start or number end parameter to "lasthundredrequestAction" in the Timeline module. Recommendations For versions prior to...
Command injection
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone...
CVE-2020-24032
CVE-2020-24032 affects XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances via the tz.pl script: it permits command injection through shell metacharacters in the timezone (cmd=set&tz=OS). The Red Hat/PRION/PR security records corroborate the same vulnerability. No exploitation status is provided ...
CVE-2020-24032: Improper Neutralization of Special Elements used in an OS Command
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone...
CVE-2020-11733
An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin...
PT-2020-12813
Name of the Vulnerable Software and Affected Versions Spirent TestCenter and Avalanche appliance admin interface firmware versions = 5.08 Description An issue allows an attacker with access to an SSH restricted shell to achieve root access via shell metacharacters. This enables the attacker to re...
CVE-2020-17368
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection...
DEBIAN-CVE-2020-17368
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection...
Command injection
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection...
CVE-2020-17368
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection...
CVE-2020-17368
CVE-2020-17368 affects Firejail prior to 0.9.64. It arises when using --output or --output-stderr, where shell metacharacters are mishandled and the command line arguments are concatenated into a single string passed to a shell, enabling potential command injection. Public disclosures in Debian L...
CVE-2020-17368: Improper Neutralization of Special Elements used in an OS Command
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may lead to command injection...
Pi-Hole Elevation of Privilege Vulnerability
Pi-hole is a multi-platform, network-wide ad-blocking tool with support for... ,.., Pi-Hole suffers from a security vulnerability. The vulnerability can be exploited by an attacker to access with root privileges with the help of shell metacharacters...