CWE-78

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary c

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code e

User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary c

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `us

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to

TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerabilit

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail S

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by se

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by ad

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote a

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a cra

An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (i

An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.

An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v

IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the sys

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject c

Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with adm

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An at

CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been dec

Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to up

Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to u

Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high pri

Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated att

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware version

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDC

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi

Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi

Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injecti

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and

Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filteri

An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious

Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1