12988 matches found
CVE-2010-5330: Improper Neutralization of Special Elements used in a Command
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...
CVE-2017-18377: Improper Neutralization of Special Elements used in a Command
An issue was discovered on Wireless IP Camera P2P WIFICAM cameras. There is Command Injection in the setftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a setftp.cgi?svr=192.168.1.1&port=21&user=ftp URI...
CVE-2010-5330
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...
PT-2019-8312
Name of the Vulnerable Software and Affected Versions Wireless IP Camera P2P WIFICAM cameras affected versions not specified Description The issue concerns Command Injection in the set ftp.cgi script via shell metacharacters in the pwd variable. This can be demonstrated by a "set...
CVE-2019-5216
There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156C00E156R2P14T8, Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156C00E156R1P20T8 and Honor Play smartphones versions earlier than Cornell-AL00A...
PT-2019-6151
Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.6.18 Ansible versions prior to 2.7.12 Ansible versions prior to 2.8.2 Description A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through...
FFmpeg Uninitialized Variable Usage Vulnerability
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An uninitialized variable usage vulnerability exists in versions of FFmpeg prior to 3.2.14. The vulnerability stems from aareadheader not checking...
Schneider Electric Altivar ATV71HU75Y Variable Speed Drive
Binary data 764285.prm...
Schneider Electric Altivar ATV61HU55Y Variable Speed Drive
Binary data 764092.prm...
Schneider Electric Altivar ATV71HU55N4S337 Variable Speed Drive
Binary data 764272.prm...
Schneider Electric Altivar ATV71HU22M3Z Variable Speed Drive
Binary data 764239.prm...
Schneider Electric Altivar ATV61HU22M3 Variable Speed Drive
Binary data 764062.prm...
Schneider Electric Altivar ATV71HD15M3XZ Variable Speed Drive
Binary data 764161.prm...
Schneider Electric Altivar ATV71HD55N4S337 Variable Speed Drive
Binary data 764212.prm...
Schneider Electric Altivar ATV61HC16N4D Variable Speed Drive
Binary data 763957.prm...
Schneider Electric Altivar ATV61HU30N4 Variable Speed Drive
Binary data 764072.prm...
Schneider Electric Altivar ATV61HU15N4S337 Variable Speed Drive
Binary data 764060.prm...
Schneider Electric Altivar ATV61H075N4Z Variable Speed Drive
Binary data 763945.prm...