CWE-78

In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafte

In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafte

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted

A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker t

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.

IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the s

A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (20

snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709

WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vector

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.1

phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict ex

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict pop

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user

Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsb

Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI

An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 a

Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsaf

Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain

Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 rele

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection

A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 fi

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.1

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted net

An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.

An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Spe

IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on

ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon result

Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_k

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.2

Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and p

A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user c

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacter

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacter

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when c

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500,

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privil

A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 thro

The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileg

An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specia