CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to ex

SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface for personal or group use. Sever

An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary

D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in jhttpd msp_info_htm function.

D-Link DI_8004W 16.07.26A1 contains a command execution vulnerability in the jhttpd upgrade_filter_asp function.

Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allow

Beijing Digital China Cloud Technology Co., Ltd. DCME-320 v.7.4.12.60 has a command execution vulnerability, which can b

A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical. This issue affects the upgr

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgrade_filter.asp file

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via msp_info.htm.

D-Link DI-8300 v16.07.26A1 is vulnerable to command injection via the upgrade_filter_asp function.

Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request mes

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chai

Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i

Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by s

Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by s

Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by s

A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm

An issue in DCME-320-L <=9.3.2.114 allows a remote attacker to execute arbitrary code via the log_u_umount.php component

A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to cond

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary comm

Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sen

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the N

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability.

Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. NOTE: multip

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to e

A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vu

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the msp_info_htm function via the flag parameter

Arbitrary commands execution on the server by exploiting a command injection vulnerability in the LDAP authentication me

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerabil

An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access s

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerabil

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e.

In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can impo

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which ca

SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().

There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in t

A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenti

Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulner

FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and passw

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,