Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 21.9%.
PHP
Command Injection
Enterprise Backup
Unitrends
NVD
Exploit-DB
GitHub
VulDB
CVSS 2.0
10.0
EPSS
21.9%
Threat
4.2
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
Canonical
Ubuntu Linux
Openstack
Opensuse
+1
NVD
VulDB
CVSS 2.0
9.0
EPSS
0.5%