https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:44:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01851 bdu:2019-01851 https://cve.radiocsirt.org/vuln/bdu:2019-01851 https://cve.radiocsirt.org/vuln/certfr-2019-avi-083 certfr-2019-avi-083 https://cve.radiocsirt.org/vuln/certfr-2019-avi-083 https://cve.radiocsirt.org/vuln/cnvd-2019-06344 cnvd-2019-06344 https://cve.radiocsirt.org/vuln/cnvd-2019-06344 https://cve.radiocsirt.org/vuln/euvd-2026-68098 EUVD-2026-68098 https://cve.radiocsirt.org/vuln/euvd-2026-68098 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16417 <p>Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection.</p> <p>Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16417 https://cve.radiocsirt.org/vuln/ghsa-cx84-r7h4-7pfj <p>Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection.</p> <p>Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.1 allows Command injection.</p> https://cve.radiocsirt.org/vuln/ghsa-cx84-r7h4-7pfj https://cve.radiocsirt.org/vuln/gsd-2018-16417 gsd-2018-16417 https://cve.radiocsirt.org/vuln/gsd-2018-16417 https://cve.radiocsirt.org/vuln/icsa-19-134-07 <p>A command injection vulnerability is present that permits an unauthenticated user with access to the web interface of the affected device to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality, integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. A vulnerability exists in the affected devices that allows an unauthenticated attacker to access core dumps of previously crashed processes through the web interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. A vulnerability is present which allows an unauthenticated user to retrieve recently cached configuration commands by sending a crafted URL to the web interface of an affected device. The security v…</p> <p>A command injection vulnerability is present that permits an unauthenticated user with access to the web interface of the affected device to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality, integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. A vulnerability exists in the affected devices that allows an unauthenticated attacker to access core dumps of previously crashed processes through the web interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected system. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known. A vulnerability is present which allows an unauthenticated user to retrieve recently cached configuration commands by sending a crafted URL to the web interface of an affected device. The security v…</p> https://cve.radiocsirt.org/vuln/icsa-19-134-07