Lucene search
+L

132 matches found

BDU FSTEC
BDU FSTEC
added 2024/06/03 12:00 a.m.12 views

The system’s vulnerability for testing and training SAP IDES arises from the lack of measures taken to neutralize special elements used in the operating system command set. This allows a perpetrator to execute arbitrary code.

The vulnerability of the SAP IDES system for testing and training exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.4CVSS7.6AI score0.0049EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:00 a.m.14 views

The vulnerability of the Ivanti EPM 2022 SU5 endpoint management software lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti EPM 2022 SU5 endpoint management software exists due to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially...

9.6CVSS8.5AI score0.6439EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/04/24 12:00 a.m.9 views

The vulnerability of the FortiSandbox threat detection and mitigation system arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the FortiSandbox threat detection and mitigation system exists because measures are not taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially...

9CVSS5.9AI score0.0248EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.11 views

The vulnerability of the svc_cbr utility in the operating system for Dell Unity Operating Environment storage systems allows a perpetrator to execute arbitrary operating system commands.

The vulnerability of the svccbr utility in the Dell Unity Operating Environment OE storage system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary operating...

7.8CVSS7.5AI score0.0088EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:00 a.m.13 views

The vulnerability of the svc_topstats utility in the Dell Unity Operating Environment (OE) system allows a hacker to overwrite any files with root privileges.

The vulnerability of the svctopstats utility in the Dell Unity Operating Environment OE storage system exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability could allow a malicious individual to rewrite any...

7.8CVSS7.2AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/15 12:00 a.m.9 views

The vulnerability of the GlobalProtect function in the PAN-OS operating system allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the GlobalProtect function in the PAN-OS operating system is related to the lack of measures taken to neutralize special elements used in the OS command. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

10CVSS8.5AI score0.99999EPSS
SaveExploits46References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.12 views

The vulnerability of the microprogramming software for UniLogic Studio series UniStream-controlled programmable logic controllers lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary code.

The vulnerability of the microprogramming software for UniLogic Studio series UniStream is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.01731EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/15 12:00 a.m.15 views

The vulnerability of the command-line interface of ArubaOS systems arises from the lack of measures taken to eliminate special elements used in operating system commands. This allows attackers to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS exists because measures to neutralize the special elements used in the operating system’s command are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.5AI score0.0124EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/11 12:00 a.m.9 views

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems exists due to the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

4.3CVSS6.9AI score0.09409EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:00 a.m.13 views

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary code.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8AI score0.01037EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/04 12:00 a.m.12 views

The vulnerability of the Hitachi Global Link Manager (HGLM) network management system lies in its failure to eliminate special elements used in the expression language used by operators. This allows attackers to execute arbitrary code.

The vulnerability of the Hitachi Global Link Manager HGLM network management system lies in the lack of measures to neutralize special elements used in the expression language of the operator. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS7.6AI score0.00457EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/12 12:00 a.m.11 views

PT-2024-3897 · Sap · Sap Ides Ecc-Systems

Name of the Vulnerable Software and Affected Versions: SAP IDES ECC-systems affected versions not specified Description: The issue allows the execution of arbitrary program code of a user's choice, potentially enabling an attacker to control the system's behavior by executing malicious code. This...

7.4CVSS7.5AI score0.0049EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/02/01 12:00 a.m.18 views

PT-2024-1440 · Kaspersky · Kaspersky Security 8.0 For Linux Mail Server

Name of the Vulnerable Software and Affected Versions: Kaspersky Security 8.0 for Linux Mail Server Description: The issue allows an attacker to potentially force an administrator to click on a malicious link to perform unauthorized actions. This is due to the lack of measures to neutralize speci...

8.8CVSS6.2AI score0.00379EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/01/22 12:00 a.m.13 views

The vulnerability of the Yealink Meeting Server lies in the lack of measures taken to neutralize special elements used in the operating system command line. This allows attackers to execute arbitrary commands with root privileges.

The vulnerability of the Yealink Meeting Server exists because measures to neutralize special elements used in the operating system are not taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

10CVSS5.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/22 12:00 a.m.13 views

The vulnerability of the setWanCfg function in the Totolink LR1200GB router’s microprogramming software, which exists due to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary code.

The vulnerability of the setWanCfg function in the Totolink LR1200GB router microprogramming system exists due to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.03834EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.11 views

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center exists due to the failure to take measures to neutralize special elements. This allows attackers to execute arbitrary code.

The vulnerability of the Atlassian Confluence Server and the Confluence Data Center exists due to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted template...

10CVSS8.5AI score0.99984EPSS
SaveExploits34References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/01/02 12:00 a.m.15 views

The vulnerability of Proscend M330-w, M330-W5, M350-5G, M350-W5G, M350-6, M350-W6, M301-G, M301-GW, and ICR 111WG microprogrammed software in industrial routers stems from the lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of Proscend M330-w, M330-W5, M350-5G, M350-W5G, M350-6, M350-W6, M301-G, M301-GW, and ICR 111WG microprogrammed software in industrial routers is related to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this...

10CVSS8.1AI score0.02881EPSS
SaveExploits2References4Affected Software9
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.12 views

The vulnerability of the cfgsave function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cfgsave function in D-Link G416 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting to...

8.8CVSS8.1AI score0.01187EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.11 views

Uyumsoft Bilgi Sistemleri LioXERP Cross-Site Scripting Vulnerability

Uyumsoft Bilgi Sistemleri LioXERP is an enterprise resource planning solution from Uyumsoft. A cross-site scripting vulnerability exists in versions prior to Uyumsoft Bilgi Sistemleri LioXERP v.146, which stems from input that is not neutralized during page generation, resulting in cross-site...

6.1CVSS6AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.12 views

Uyumsoft Bilgi Sistemleri LioXERP Cross-Site Scripting Vulnerability

Uyumsoft Bilgi Sistemleri LioXERP is an enterprise resource planning solution from Uyumsoft. A cross-site scripting vulnerability exists in versions prior to Uyumsoft Bilgi Sistemleri LioXERP v.146, which stems from input that is not neutralized during page generation, resulting in cross-site...

6.1CVSS6AI score0.00331EPSS
SaveExploits0References2
Rows per page
Query Builder