CWE-78

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improp

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in RTI Connext

An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a lo

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2

Rizin is a UNIX-like reverse engineering framework and command-line toolset. `rizin.c` still had an old snippet of code

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a rac

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS

A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can us

An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_t

Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the

Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows n

A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow op

** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the functions formSysCmd(), formUpgradeCert(), and

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitra

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnera

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vuln

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal`

Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation

A reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 all

LLama Factory enables fine-tuning of large language models. A critical remote OS command injection vulnerability has bee

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow a

An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could a

SAP IDES ECC-systems contain code that permits the execution of arbitrary program code of user's choice.An attacker can

projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant s

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ans

Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way t

Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable

Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2,

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could a

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun

A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected b

A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects th

A vulnerability has been found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. This vulnerability a

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. This issue affects the fu

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. Affected is the

A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. Affected by this v

A vulnerability was found in openBI up to 1.0.8 and classified as critical. This issue affects the function dlfile of th

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application fil

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ao

OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker

A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknow

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmwa

TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the Clo

A vulnerability was found in F-logic DataCube3 1.0. It has been declared as critical. Affected by this vulnerability is

All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user in