https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:27:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-32562 cnvd-2020-32562 https://cve.radiocsirt.org/vuln/cnvd-2020-32562 https://cve.radiocsirt.org/vuln/euvd-2026-54316 EUVD-2026-54316 https://cve.radiocsirt.org/vuln/euvd-2026-54316 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11355 <p>An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator&#39;s page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.</p> <p>An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator&#39;s page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11355 https://cve.radiocsirt.org/vuln/ghsa-wjqc-hf5j-wc82 <p>An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator&#39;s page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.</p> <p>An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator&#39;s page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.</p> https://cve.radiocsirt.org/vuln/ghsa-wjqc-hf5j-wc82 https://cve.radiocsirt.org/vuln/gsd-2019-11355 gsd-2019-11355 https://cve.radiocsirt.org/vuln/gsd-2019-11355