CWE-78

Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is

GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This als

A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacke

DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters

HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Sett

IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be exec

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to as

textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generat

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w

AppUse 4.0 allows shell command injection via a proxy field.

Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated

In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacter

A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewal

backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occ

The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via s

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined sh

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc

WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unsp

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an

WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_c

The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admi

An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, a

lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrd

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include pa

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generat

WNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS commands via unspecified vec

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspeci

CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vector

A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rout

A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to exe

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical acces

GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail te

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepowe

A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation