https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 00:23:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10957 bdu:2024-10957 https://cve.radiocsirt.org/vuln/bdu:2024-10957 https://cve.radiocsirt.org/vuln/euvd-2026-5894 EUVD-2026-5894 https://cve.radiocsirt.org/vuln/euvd-2026-5894 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37569 <p>An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.</p> <p>An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-37569 https://cve.radiocsirt.org/vuln/ghsa-mp92-8wvj-jphh <p>An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.</p> <p>An issue was discovered on Mitel 6869i through 4.5.0.41 and 5.x through 5.0.0.1018 devices. A command injection vulnerability exists in the hostname parameter taken in by the provis.html endpoint. The provis.html endpoint performs no sanitization on the hostname parameter (sent by an authenticated user), which is subsequently written to disk. During boot, the hostname parameter is executed as part of a series of shell commands. Attackers can achieve remote code execution in the root context by placing shell metacharacters in the hostname parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-mp92-8wvj-jphh https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1325 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mitel SIP Phone ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mitel SIP Phone ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen oder beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1325