Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 21.9%.
Command Injection
PHP
Enterprise Backup
NVD
Exploit-DB
GitHub
VulDB
CVSS 2.0
10.0
EPSS
21.9%
Threat
4.2
The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
Neutron
Ubuntu Linux
Opensuse
NVD
VulDB
CVSS 2.0
9.0
EPSS
0.5%