CWE-78

Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers

An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. The /cgi-

An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /

IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authent

Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote att

CyberPanel before 2.3.8 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remo

Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an aut

Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to e

exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd p

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation wh

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user

An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission s

An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search templat

OS command injection vulnerabilities in GE HealthCare ultrasound devices

A command injection vulnerability exists in the 'run_xtts_api_server' function of the parisneo/lollms-webui application,

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This

Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in

yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to pre

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions 2.10.0 and prior, Litestar's `docs-pr

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. T

On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could al

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Managemen

An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.

Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() API

Soft Serve is a self-hostable Git server for the command line. Prior to 0.7.5, it is possible for a user who can commit

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.3

Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configu

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as cri

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critic

Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port o

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application incorrectly neutral

Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in

TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vuln

Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter.

TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows netw

NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent

NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjace

D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows ne

D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerabili

D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerabilit

D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability

D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability al