All CVEs — page 425 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in Netcore NR289-GE 1.4.5102 allows for missing authentication due to a vulnerability in the boa_temp Handler's process_request function, enabling remote attackers to exploit this without authentication.
The vulnerability allows remote command injection through the manipulation of the ntp_ip argument in the /set_ntp_server_ip.cgi file, enabling attackers to execute arbitrary commands on the device.
The flaw in Exam4 allows a local attacker to execute arbitrary commands with root privileges via a command injection vulnerability in the com.extegrity.LogTool privileged helper.
The flaw allows os command injection via the mac argument in the /location_time.cgi file, enabling remote code execution.
The flaw is a stack-based buffer overflow in the password-check function of Netcore NR289-GE 1.4.5102, which can be exploited by manipulating the Username argument. This vulnerability is critical as it allows remote code execution.
A security flaw in Netcore NR289-GE 1.4.5102 allows for improper authentication via manipulation of the /bin/boa file, enabling remote attackers to exploit this vulnerability.
This flaw allows an authenticated client to read custom storage volumes from any project, including snapshots and configurations, by crafting a request that omits the source type.
A Code Injection vulnerability exists in Logsign SIEM versions from 6.4.101 before 6.4.117, allowing attackers to execute arbitrary code.
The flaw is a default credentials vulnerability in Logsign SIEM, allowing attackers to gain unauthorized access using common or default usernames and passwords.
This vulnerability allows an authenticated client or a malicious migration source server to write attacker-controlled files to arbitrary paths on the target host as root, leading to full host compromise.
This vulnerability allows SQL injection, enabling an attacker to execute arbitrary SQL commands, potentially leading to data theft or system compromise.