13 matches found
EUVD-2023-48396
Malicious code in bioql PyPI...
EUVD-2023-47741
Malicious code in bioql PyPI...
CVE-2023-44037
An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive information via the TACACS+ server component...
CVE-2023-43322
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...
Command injection
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...
ZPE Systems Nodegrid OS Command Injection Vulnerability
ZPE Systems Nodegrid OS is an operating system from ZPE Systems, USA. A security vulnerability exists in ZPE Systems Nodegrid OS that stems from a command injection vulnerability in the /v1/system/toolkit/files/ endpoint. Affected products and versions: ZPE Systems Nodegrid OS versions 5.0.0...
CVE-2023-43322
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...
CVE-2023-43322
CVE-2023-43322 affects ZPE Systems Nodegrid OS versions 5.0.0–5.0.17, 5.2.0–5.2.19, 5.4.0–5.4.16, 5.6.0–5.6.13, 5.8.0–5.8.10, and 5.10.0–5.10.3, with a command injection via /v1/system/toolkit/files/. Root cause: command injection; CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW a...
CVE-2023-43322
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/...
CVE-2023-44037
An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive information via the TACACS+ server component...
Design/Logic Flaw
An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive information via the TACACS+ server component...
CVE-2023-44037
An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive information via the TACACS+ server component...
CVE-2023-44037
CVE-2023-44037 concerns ZPE Systems Nodegrid OS, affecting versions 5.8.10–5.8.13 and 5.10.3–5.10.5. The issue originates in the TACACS+ server component and enables a remote attacker to obtain sensitive information. Public sources in the connected set specify the affected ranges and describe the...