CWE-78

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote

TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input par

The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST

All versions of package launchpad are vulnerable to Command Injection via stop.

D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead

The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause

This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerabili

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (wit

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in t

The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.

This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection

This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js.

This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js.

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The

Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpo

Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading t

OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_sy

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event

EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a

rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metachara

LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (

In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands w

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in c

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to exe

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacter

An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3. Specially crafted web requests can

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string const

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmwar

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmwar

Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1

Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows

This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function,

This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, i

This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is poss

In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as

A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, al

Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors

An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior

The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execut

The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execu

The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbit