Browse CVEs

CRITICAL 9.8 CVE-2017-1000009 Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution. Product Information Management Patch available Fix from $2,3002017-07-17 CRITICAL 9.8 CVE-2017-4053 Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users … Advanced Threat Defense Patch available Fix from $2,3002017-07-12 CRITICAL 9.9 CVE-2017-7175EPSS 7% NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom outp… Nfsen after 1.3.7 Fix from $2,3002017-07-10 CRITICAL 9.8 CVE-2017-2237 Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allo… Hem Gw16a Firmware after 1.2.0 Fix from $2,3002017-07-07 HIGH 8.0 CVE-2017-2183 HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings. Home Spot Cube 2 Firmware Mitigation only Fix from $1,9502017-07-07 HIGH 8.8 CVE-2017-2185 HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI. Home Spot Cube 2 Firmware Mitigation only Fix from $1,9502017-07-07 HIGH 8.2 CVE-2017-6707 A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Series, and 57… Staros Mitigation only Fix from $1,9502017-07-06 HIGH 8.8 CVE-2017-6712 A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges to root … Elastic Services Controller Mitigation only Fix from $1,9502017-07-06 CRITICAL 9.8 CVE-2017-6714 A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arb… Ultra Services Framework Staging Server after 5.0.2 Fix from $2,3002017-07-06 CRITICAL 9.9 CVE-2017-1253 IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted re… Security Guardium Mitigation only Fix from $2,3002017-07-05 CRITICAL 9.8 CVE-2017-8116 The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary… Rut900 Firmware after 00.03.265 Fix from $2,3002017-07-03 HIGH 8.8 CVE-2017-2844 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2845EPSS 7% An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firm… C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2846 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2847 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2848 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2849 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2850 In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-29 HIGH 8.8 CVE-2017-2841EPSS 6% An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firm… C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-27 HIGH 8.8 CVE-2017-2842 In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-27 HIGH 8.8 CVE-2017-2843 In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for … C1 Indoor Hd Camera Firmware Mitigation only Fix from $1,9502017-06-27 CRITICAL 9.8 CVE-2017-9828EPSS 82% '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remo… Network Camera Ib8369 Firmware Mitigation only Fix from $2,3002017-06-23 HIGH 8.8 CVE-2017-2827EPSS 8% An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firm… C1 Indoor Hd Camera Firmware No fix yet Fix from $1,9502017-06-21 HIGH 8.8 CVE-2017-2828EPSS 8% An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firm… C1 Indoor Hd Camera Firmware No fix yet Fix from $1,9502017-06-21 HIGH 8.8 CVE-2017-9757EPSS 39% IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited… Ipfire after 2.19 Fix from $1,9502017-06-19 CRITICAL 9.8 CVE-2017-9736 SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote … Spip Patch available Fix from $2,3002017-06-17 HIGH 8.8 CVE-2017-6682 A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commands as the… Elastic Services Controller Mitigation only Fix from $1,9502017-06-13 HIGH 8.8 CVE-2017-6683EPSS 6% A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute arbitrar… Elastic Services Controller Mitigation only Fix from $1,9502017-06-13 CRITICAL 9.8 CVE-2016-7806 I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Wfs Sr01 Firmware after 1.10 Fix from $2,3002017-06-09 HIGH 7.2 CVE-2016-7819 I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator r… Ts Wrlp Firmware after 1.01.02 Fix from $1,9502017-06-09