CWE-78

The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell

The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer envir

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authentic

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could a

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 coul

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon (JDHCPD) process on Junos OS or Junos O

OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control.

Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated us

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60,

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot

A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allo

The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly in

Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specia

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary comm

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on

A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call

A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticate

A vulnerability in the CLI parsers of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (I

An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already

The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() ca

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary comma

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that be

ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary

In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manuall

In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fix

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticat

A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticat

A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attac

Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the

This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines d

Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation,

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting in