CWE-78

Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by nav

MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitra

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and ex

Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hid

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot

functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metac

D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell

An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware versi

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in th

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03

An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware ve

OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Stand

An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / c

Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allow

Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the

NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code wi

Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username

In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software

Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via

D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a suppo

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.64 a

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.

RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain a command injection vulnerability. AN authenticated malicious us

Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web

An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to poten

An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated

An OS command injection vulnerability in PAN-OS management interface allows an authenticated administrator to execute ar

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrar

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrar

Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitra

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to exec

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers an

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers an

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers an

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers an

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers an

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers an

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS S

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe

IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.

Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system adminis

A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to exe