1834 matches found
CVE-2024-14025
An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the...
QNAP Systems Video Station 安全漏洞
QNAP Systems Video Station is a multimedia application developed by QNAP Systems in Taiwan, China. QNAP Systems Video Station has a security vulnerability, which stems from SQL injection vulnerabilities. This vulnerability may allow attackers with administrator accounts to execute unauthorized co...
EUVD-2026-10531
An improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiSandbox Cloud 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests...
CVE-2025-49784
An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigDa...
CVE-2025-49784
An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigDa...
CVE-2025-49784
Summary: CVE-2025-49784 affects Fortinet FortiAnalyzer and FortiAnalyzer-BigData products across multiple versions (FortiAnalyzer 7.6.x, 7.4.x, 7.2.x, 7.0.x, 6.4.x, and FortiAnalyzer-BigData 6.2.x–7.6.x). It is described as an SQL injection due to improper neutralization of special elements in SQ...
kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation
A flaw was found in the Linux kernel's networking component. A local attacker with low privileges could exploit a design issue in the teql queueing discipline, which is responsible for managing network traffic. By sending specially crafted network packets, an attacker could trigger a use-after-fr...
ServiceNow AI Platform 安全漏洞
ServiceNow AI Platform is an AI intelligent platform developed by the American company ServiceNow. There is a security vulnerability in ServiceNow AI Platform, which stems from unverified users potentially executing unauthorized code, potentially leading to remote code execution...
pfSense 代码问题漏洞
pfSense is a network firewall based on FreeBSD Linux. pfSense has code-related vulnerabilities, which stem from defects in the code, potentially leading to execution of unauthorized code...
CVE-2025-64157
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to execute unauthorized code or commands via specifically crafted configuration...
CVE-2026-21537
Improper control of generation of code 'code injection' in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network...
CVE-2025-15311
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance...
CVE-2025-15311
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance...
CVE-2025-15311 Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance...
EUVD-2025-206829
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance...
CVE-2025-15311
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance...
CVE-2025-15311
CVE-2025-15311 affects Tanium Appliance . Documents indicate an unauthorized code execution vulnerability in this product. NVD/CVE entries show Severity HIGH (CVSS v3.1: 7.8) with Local attack vector, low attack complexity, low privileges required, no user interaction, and impact to confidentiali...
CVE-2025-15311 Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.
Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance...
Tanium Appliance 安全漏洞
The Tanium Appliance is a deployment architecture for the terminal management and security platform developed by the American company Tanium. The Tanium Appliance has a security vulnerability, which stems from unauthorized code execution...
PT-2026-6605
Name of the Vulnerable Software and Affected Versions Tanium Appliance affected versions not specified Description Tanium Appliance is subject to an unauthorized code execution issue. The vulnerability allows for the execution of unintended code. Recommendations At the moment, there is no...