CWE-78

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could

A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to t

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arb

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W wi

An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/

An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with f

An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in ad

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticate

An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certifi

A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code

sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators t

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vu

ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings.

Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validatio

Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injecti

ClearOS 7.9 contains an OS command injection vulnerability in the Log Viewer component that allows authenticated attacke

A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions

A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the co

Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the fir

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1

A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_s

A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of

A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/pp

sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a ta

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Ident

A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /c

A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify applica

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in a

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that al

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerabi

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerabil

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is c

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability i

Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function. The vul

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability

Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vuln

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerabil

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerab

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerabili

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function. The vulne

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerabili