The vulnerability of the command_test.php script of the Core Config Manager component of the Nagios XI monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the commandtest.php script of the Core Config Manager component of the Nagios XI monitoring tool is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the server.transformIndexHtml() function on the local development server of the Vite application allows attackers to perform cross-site scripting attacks.

The vulnerability of the server.transformIndexHtml function on the local development server of the Vite application is related to the lack of measures taken to neutralize HTML tags. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center, related to the failure to eliminate special elements, allows attackers to carry out “Server-Side Template Injection” attacks.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to carry out an “Server-Side Template Injection” attack...

The vulnerability of the microprogrammed software for Zyxel NAS326 and NAS542 networks exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows a perpetrator to execute any desired operating system command.

The vulnerability of Zyxel NAS326 and NAS542 network storage devices due to the lack of measures to neutralize specific elements used in the operating system commands exists. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands by sending a special...

The vulnerability of the /backup.pl component of the EasyNAS operating system’s network storage solution, allowing a hacker to execute arbitrary commands.

The vulnerability of the /backup.pl component of the EasyNAS operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2023-46097

A vulnerability has been identified in SIMATIC PCS neo All versions V4.1. The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database...

The vulnerability of the yt-dlp download utility arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This vulnerability allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the YouTube-DLP download utility exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the conf_mail.php component in the microprogramming software for solar power generation, data display, and storage of SolarView Compact allows a hacker to execute arbitrary commands.

The vulnerability of the confmail.php component in the microprogramming software for solar power measurement, data display, and storage in SolarView Compact exists due to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can...

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of measures to neutralize alternative syntaxes that constitute XSS attacks. This allows attackers to replace the displayed URL.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize the XSS alternative syntax. Exploiting this vulnerability allows a malicious actor to substitute the displayed URL with another value...

The vulnerability of the autoSaveDraft function in the Zimbra Collaboration Suite email management system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the autoSaveDraft function in the Zimbra Collaboration Suite email management system is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the 1Panel Linux server’s control panel, related to the failure to eliminate special elements used in the operating system commands, allows a hacker to execute arbitrary commands.

The vulnerability of the 1Panel Linux server’s control panel is related to the lack of measures taken to neutralize special elements used in the operating system when adding container repositories. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Tenda G103 GPON-terminals’ microprogramming software lies in the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands and compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the GPON-terminal software of Tenda G103 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and affect the integrity, availability,...

The vulnerability of Cisco IOS XE operating systems on Cisco Catalyst 9300 switches arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Cisco IOS XE-enabled Cisco Catalyst 9300 switches exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerability of the graphical and application software interface of the FortiTester hardware-based diagnostic and audit software exists due to the failure to take measures to neutralize the special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the graphical and application software interface of the FortiTester hardware-based diagnostic and audit software exists due to the failure to take measures to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a...

The vulnerability of the ArubaOS operating systems arises from the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability of the ArubaOS operating systems exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The software platform for container deployment in the SUSE Rancher production environment is vulnerable. This vulnerability stems from the failure to address the need to neutralize certain special elements used in the operating system command set. This allows attackers to execute arbitrary commands.

The vulnerability of the software platform for container deployment in the SUSE Rancher wrangler production environment exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, arises due to the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to increase their privileges.

The vulnerability of the StruxureWare Data Center Expert monitoring system exists because measures to neutralize special elements used in the operating system have not been taken. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the network card driver (drivers/net/xen-netback/netback.c) in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the driver for network cards drivers/net/xen-netback/netback.c in Linux operating systems is related to the lack of measures taken to neutralize special elements during the processing of request headers. Exploiting this vulnerability can allow a remote attacker to cause servi...

The vulnerability of the tcpdump function in the web interface for managing Cisco Identity Services Engine (ISE) connections allows a hacker to execute arbitrary commands.

The vulnerability of the tcpdump web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...