Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,98 % · rekomendacja wg zapisanej polityki
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in file /usr/lib/lua/luci/controller/admin/common.lua.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,98 % · rekomendacja wg zapisanej polityki
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40…
Opis źródłowy NVD · ENCVSS 8,1 · EPSS 5,46 % · rekomendacja wg zapisanej polityki
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attacker to write arbitrary files on the server, potentially leading to remote code execution. User interaction is required.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,96 % · rekomendacja wg zapisanej polityki
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,95 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,91 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 2,89 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 1,33 % · rekomendacja wg zapisanej polityki
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,8 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJAX action, allowing unauthenticated users to store XSS payloads which are later retrieved from another AJAX call and output unescaped.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,98 % · rekomendacja wg zapisanej polityki
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in file /usr/lib/lua/luci/controller/admin/common.lua.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,98 % · rekomendacja wg zapisanej polityki
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50(W) series firmware versions from V4.16 through V5.40, and USG20(W)-VPN series firmware versions from V4.16 through V5.40…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,1 · EPSS 5,46 % · rekomendacja wg zapisanej polityki
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attacker to write arbitrary files on the server, potentially leading to remote code execution. User interaction is required.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,96 % · rekomendacja wg zapisanej polityki
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,95 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,91 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 2,89 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,9 · EPSS 1,33 % · rekomendacja wg zapisanej polityki
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,8 % · rekomendacja wg zapisanej polityki