1874 matches found
CVE-2024-45765
Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...
CVE-2024-45765
Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...
CVE-2024-45765
Dell Enterprise SONiC OS (versions 4.1.x, 4.2.x) contains an OS command injection flaw due to improper neutralization of special elements. This could allow a remote, high-privilege attacker to execute OS commands with high privileges, as described in the CVE entry. Affected systems should be upgr...
Dell Enterprise SONiC OS 操作系统命令注入漏洞
Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open-source network operating system from Dell, USA. An operating system command injection vulnerability exists in Dell Enterprise SONiC OS versions 4.1. x and 4.2.x. The vulnerability stems from improper neutralization of...
Dell Enterprise SONiC OS 操作系统命令注入漏洞
Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open-source network operating system from Dell, USA. An operating system command injection vulnerability exists in Dell Enterprise SONiC OS versions 4.1. x and 4.2.x. The vulnerability stems from improper neutralization of...
Dell Enterprise SONiC OS 安全漏洞
Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open-source network operating system from Dell USA. A security vulnerability exists in Dell Enterprise SONiC OS versions 4.1. x and 4.2.x, which stems from improper authentication and could lead to a protection mechanism bypass...
Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6999-2)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6999-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7029-1)
"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7029-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...
PT-2024-8974 · Dell · Dell Enterprise Sonic Os
Name of the Vulnerable Software and Affected Versions: Dell Enterprise SONiC OS versions 4.1.x through 4.2.x Description: The issue is related to an improper neutralization of special elements used in an OS command, which can be exploited by a high-privileged attacker with remote access to execut...
GO-2023-1509 Path Traversal in github.com/go-sonic/sonic
Path Traversal in github.com/go-sonic/sonic...
CVE-2024-31961
A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parameter...
Sonic Technology Shopfloor.guide 安全漏洞
Sonic Technology Shopfloor.guide is an application from Sonic Technology, Inc. A security vulnerability exists in Sonic Technology Shopfloor.guide versions prior to 3.1.3. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the level2 parameter...
CVE-2024-31961
Sonic Shopfloor.guide (unit.php) prior to version 3.1.3 is affected by a SQL injection via the level2 parameter, enabling remote attackers to execute arbitrary SQL commands and potentially access/modify data. Root cause: improper handling of the level2 input leading to injection. Affected softwar...
CVE-2024-31961
A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parameter...
The vulnerability of Dell Enterprise SONiC operating systems, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of Dell Enterprise SONiC operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
CVE-2024-21418
Software for Open Networking in the Cloud SONiC Elevation of Privilege Vulnerability...
CVE-2024-21418
Software for Open Networking in the Cloud SONiC Elevation of Privilege Vulnerability...
Privilege escalation
Software for Open Networking in the Cloud SONiC Elevation of Privilege Vulnerability...
CVE-2024-21418
CVE-2024-21418 affects Software for Open Networking in the Cloud (SONiC). Public docs indicate an Elevation of Privilege vulnerability in SONiC components with affected versions including 201811, 201911, 202012, and 202205. Root cause details are not fully disclosed in the provided materials, but...
