Most recent entries from all

EUVD-2026-158223

fkie_cve-2021-33633

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py.

This issue affects aops-ceres: from 1.3.0 through 1.4.1.

GHSA-j32f-6x6r-56fq

This issue affects aops-ceres: from 1.3.0 through 1.4.1.

gsd-2021-33633

OESA-2024-1159 — aops-ceres security update

Affected: openEuler:20.03-LTS-SP4: aops-ceres, openEuler:22.03-LTS-SP3: aops-ceres

An agent which needs to be adopted in client, it managers some plugins, such as gala-gopher(kpi collection), fluentd(log collection) and so on. Security Fix(es): In versions 1.3.0-1.4.1 of the ceres software package, the execute_shell_command function does not properly verify or filter the command or subcommand parameters entered by users. This allows an attacker to exploit the vulnerability by injecting malicious code and execute arbitrary commands locally. Attackers can exploit this vulnerability to perform unauthorized operations, which may cause severe security threats and losses to the system.(CVE-2021-33633)