CWE-78

Logstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote attackers to execute arbi

UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, an

The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated a

The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi

NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoin

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi

Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional

Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell m

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and

EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/too

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functio

prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in

A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS

applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenti

The /admin/admapi.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote authenticated attacke

Askey Fiber Router RTF3505VW-N1 BR_SV_g000_R3505VWN1001_s32_7 devices allow Remote Code Execution and retrieval of admin

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Networ

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products

Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerabili

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play (UPnP) is enabled by defau

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R780

DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1

A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.1

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to

Inim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command injection vulnerability. T

The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrar

iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using de

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series

The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse libr

Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) f

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/li

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EP

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in

A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection us

A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vuln

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbit

Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters in

An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /insta

MyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session d

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in enc

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the

Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Ga