CWE-78

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C74311

ILIAS before 7.16 allows OS Command Injection.

Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier

OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier

Tenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.

Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.

Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL.

The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user i

OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrar

A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the

SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker

Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to explo

The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a

Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON

The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the co

A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAll

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A loca

The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are pr

Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulner

A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insuffic

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport proto

pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in p

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authent

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown par

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unk

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown pro

OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authent

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions <

A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst

Sourcegraph is a code intelligence platform. In versions prior to 4.1.0 a command Injection vulnerability existed in the

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoU

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL

An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attack

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device int

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection.

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands

The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to execute arbi

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version

An OS command injection was found in SecuwaySSL, when special characters injection on execute command with runCommand ar

VMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 t

Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interf

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTU

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the