CVE-2016-6902

CRITICAL Year: 2016
CVSS v3 Score
9.9
Critical
CVSS v2 Score
9.0
Critical
Weakness Type
CWE-264
View all →

Vulnerability Description

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.

Related Vulnerabilities

CVE-2015-7411

CRITICAL
CVSS:9.9(Critical)

The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors.

CWE-2642015

CVE-2016-6903

CRITICAL
CVSS:9.9(Critical)

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.

CWE-2642016

CVE-2016-9269

CRITICAL
CVSS:9.9(Critical)

Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, ...

CWE-2642016

CVE-2017-12251

CRITICAL
CVSS:9.9(Critical)

A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) ope...

CWE-2642017

CVE-2013-0422

CRITICAL
CVSS:9.8(Critical)

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a ...

CWE-2642013

CVE-2013-4451

CRITICAL
CVSS:9.8(Critical)

gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repo...

CWE-2642013