CWE-78

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remo

Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers wit

A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG400

UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker

An authenticated Remote Code Execution (RCE) vulnerability exists in the AirWave CLI. Successful exploitation of this vu

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmwa

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the HOST n

home 5G HR02 and Wi-Fi STATION SH-54C contain an OS command injection vulnerability in the configuration restore functio

The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. A

IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to exe

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue

A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installa

Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrat

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrat

D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-

D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjac

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adj

D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjac

D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adja

OS command injection vulnerability in WRC-X5400GS-B v1.0.10 and earlier, and WRC-X5400GSA-B v1.0.10 and earlier allows a

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS com

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface paramete

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname paramet

An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command

OS command injection vulnerability exists in ELECOM wireless LAN routers. A specially crafted request may be sent to the

Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software versions

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability. This vulnerability allows

Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability. This vulnerability allows p

DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker

There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis in

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version

Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically pr

Visteon Infotainment UPDATES_ExtractFile Command Injection Remote Code Execution Vulnerability. This vulnerability allow

Visteon Infotainment REFLASH_DDU_FindFile Command Injection Remote Code Execution Vulnerability. This vulnerability allo

Visteon Infotainment REFLASH_DDU_ExtractFile Command Injection Remote Code Execution Vulnerability. This vulnerability a

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300R

IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated at

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but d

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

A vulnerability was found in MailCleaner up to 2023.03.14. It has been declared as critical. This vulnerability affects

Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,