Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept unsanitized command…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2,03 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec() and allow an authenticated attacker to execute arbitrary commands. Ilevia has declined to service this vulnerability, and…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,99 % · rekomendacja wg zapisanej polityki
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attacker to write arbitrary files on the server, potentially leading to remote code execution. User interaction is required.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,96 % · rekomendacja wg zapisanej polityki
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,95 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 2,89 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 1,33 % · rekomendacja wg zapisanej polityki
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 1,7 % · rekomendacja wg zapisanej polityki
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept unsanitized command…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2,03 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec() and allow an authenticated attacker to execute arbitrary commands. Ilevia has declined to service this vulnerability, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,99 % · rekomendacja wg zapisanej polityki
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attacker to write arbitrary files on the server, potentially leading to remote code execution. User interaction is required.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,96 % · rekomendacja wg zapisanej polityki
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,95 % · rekomendacja wg zapisanej polityki
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 2,89 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,9 · EPSS 1,33 % · rekomendacja wg zapisanej polityki
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 1,7 % · rekomendacja wg zapisanej polityki