https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 12:33:48 +0000 https://vulnerability.circl.lu/vuln/bdu:2022-04229 bdu:2022-04229 https://vulnerability.circl.lu/vuln/bdu:2022-04229 https://vulnerability.circl.lu/vuln/fkie_cve-2021-44080 <p>A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.</p> <p>A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2021-44080 https://vulnerability.circl.lu/vuln/ghsa-xjj9-3q77-6c55 <p>A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.</p> <p>A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connection_type parameter of the statussupport_diagnostic_tracing.json endpoint.</p> https://vulnerability.circl.lu/vuln/ghsa-xjj9-3q77-6c55 https://vulnerability.circl.lu/vuln/gsd-2021-44080 gsd-2021-44080 https://vulnerability.circl.lu/vuln/gsd-2021-44080