CWE-78 · OS Command Injection (page 49)
Page 49 of 65 — CVEs classified under CWE-78, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7781 | Critical | 9.8 | 2020-12-16 | This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrates the vulnerabilit… |
CVE-2019-14479 | High | 8.8 | 2020-12-16 | AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server runni… |
CVE-2020-25618 | High | 8.8 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effective… |
CVE-2020-35476 | Critical | 9.8 | 2020-12-16 | A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot… |
CVE-2020-26259 | Medium | 6.8 | 2020-12-16 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the loca… |
CVE-2020-25759 | High | 8.8 | 2020-12-15 | An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacke… |
CVE-2020-25757 | High | 8.8 | 2020-12-15 | A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulti… |
CVE-2020-20184 | Critical | 9.8 | 2020-12-14 | GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection. |
CVE-2020-5636 | Medium | 6.8 | 2020-12-14 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specially crafted request to a specific URL… |
CVE-2020-5635 | High | 8.8 | 2020-12-14 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may… |
CVE-2020-28440 | Critical | 9.8 | 2020-12-11 | All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function. |
CVE-2020-28439 | Critical | 9.8 | 2020-12-11 | This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js… |
CVE-2020-15357 | Critical | 9.8 | 2020-12-11 | Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell meta… |
CVE-2020-12149 | Medium | 6.8 | 2020-12-11 | The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config fi… |
CVE-2020-12148 | Medium | 6.8 | 2020-12-11 | A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary comm… |
CVE-2020-7789 | Medium | 5.6 | 2020-12-11 | This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sani… |
CVE-2020-29311 | Critical | 9.8 | 2020-12-10 | Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by an… |
CVE-2020-19527 | Critical | 9.8 | 2020-12-10 | iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php. |
CVE-2020-19142 | Critical | 9.8 | 2020-12-10 | iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php. |
CVE-2019-7198 | Critical | 9.8 | 2020-12-10 | This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in… |
CVE-2020-25499 | High | 8.8 | 2020-12-09 | TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execut… |
CVE-2020-26838 | Critical | 9.1 | 2020-12-09 | SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenti… |
CVE-2020-29390 | Critical | 9.8 | 2020-11-30 | Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker t… |
CVE-2020-29381 | Critical | 9.8 | 2020-11-29 | An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devic… |
CVE-2020-26245 | High | 8.1 | 2020-11-27 | npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of sh… |
CVE-2020-7778 | High | 7.3 | 2020-11-26 | This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS… |
CVE-2020-29056 | Critical | 9.8 | 2020-11-24 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S… |
CVE-2020-4006 | Critical | 9.1 | 2020-11-23 | VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability. |
CVE-2020-3586 | Critical | 9.4 | 2020-11-18 | A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary comman… |
CVE-2020-28581 | High | 7.2 | 2020-11-18 | A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attack… |
CVE-2020-28580 | High | 7.2 | 2020-11-18 | A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker… |
CVE-2020-3367 | High | 7.8 | 2020-11-18 | A vulnerability in the log subscription subsystem of Cisco AsyncOS for the Cisco Secure Web Appliance (formerly Web Security Appliance) could allow an authenti… |
CVE-2020-24297 | High | 8.8 | 2020-11-18 | httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests… |
CVE-2020-26217 | High | 8.0 | 2020-11-16 | XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by mani… |
CVE-2020-8273 | High | 8.8 | 2020-11-16 | Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8. |
CVE-2020-8270 | High | 8.8 | 2020-11-16 | An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes C… |
CVE-2020-2492 | High | 7.2 | 2020-11-16 | If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS version… |
CVE-2020-2490 | High | 7.2 | 2020-11-16 | If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS version… |
CVE-2020-24719 | Critical | 9.8 | 2020-11-12 | Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic… |
CVE-2020-2000 | High | 7.2 | 2020-11-12 | An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators to disrupt system p… |
CVE-2020-17010 | High | 7.8 | 2020-11-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2020-28347 | Critical | 9.8 | 2020-11-08 | tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exi… |
CVE-2020-3371 | Medium | 6.3 | 2020-11-06 | A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execut… |
CVE-2020-16846 | Critical | 9.8 | 2020-11-06 | An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injectio… |
CVE-2020-24849 | High | 8.8 | 2020-11-05 | A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at… |
CVE-2018-19950 | Critical | 9.8 | 2020-11-02 | If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Stat… |
CVE-2020-25849 | High | 8.8 | 2020-11-01 | MailGates and MailAudit products contain Command Injection flaw, which can be used to inject and execute system commands from the cgi parameter after attackers… |
CVE-2020-27887 | High | 8.8 | 2020-10-29 | An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run ar… |
CVE-2020-27744 | Critical | 9.8 | 2020-10-29 | An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges. |
CVE-2018-19949 | Critical | 9.8 | 2020-10-28 | If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QT… |
CVE-2020-16257 | Critical | 9.8 | 2020-10-28 | Winston 1.5.4 devices are vulnerable to command injection via the API. |
CVE-2020-27976 | Critical | 9.8 | 2020-10-28 | osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This… |
CVE-2020-27159 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My… |
CVE-2020-27158 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in cgi_api.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114. |
CVE-2020-25765 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1… |
CVE-2020-26878 | High | 8.8 | 2020-10-26 | Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injec… |
CVE-2020-15272 | High | 8.7 | 2020-10-26 | In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*) shell commands if they can control the… |
CVE-2020-15271 | Critical | 9.3 | 2020-10-26 | In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that us… |
CVE-2020-7752 | High | 8.8 | 2020-10-26 | This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to o… |
CVE-2020-3459 | High | 7.8 | 2020-10-21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privile… |
CVE-2020-3457 | Medium | 6.7 | 2020-10-21 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privile… |
CVE-2020-5791 | High | 7.2 | 2020-10-20 | Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admin user to execute operating system comm… |
CVE-2020-13778 | High | 8.8 | 2020-10-19 | rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or l… |
CVE-2020-14144 | High | 7.2 | 2020-10-16 | The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the documentation was not… |
CVE-2020-25859 | Medium | 6.7 | 2020-10-15 | The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while… |
CVE-2020-6364 | Critical | 10.0 | 2020-10-15 | SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that… |
CVE-2020-17406 | High | 8.8 | 2020-10-13 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is… |
CVE-2020-3602 | Medium | 6.3 | 2020-10-08 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privilege… |
CVE-2020-3601 | Medium | 4.4 | 2020-10-08 | A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privilege… |
CVE-2020-26582 | High | 8.8 | 2020-10-06 | D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping (ak… |
CVE-2020-14293 | High | 7.5 | 2020-10-02 | conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the… |
CVE-2020-12124 | Critical | 9.8 | 2020-10-02 | A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arb… |
CVE-2020-7735 | Medium | 6.6 | 2020-09-25 | The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option. |
CVE-2020-25223 | Critical | 9.8 | 2020-09-25 | A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 |
CVE-2020-3417 | Medium | 6.8 | 2020-09-24 | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to execute persistent code at boot time and break the chain of trust. Thi… |
CVE-2020-3403 | High | 7.8 | 2020-09-24 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to inject a command to the underlying operating system that wi… |
CVE-2020-24365 | High | 8.8 | 2020-09-24 | An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated att… |
CVE-2020-16148 | High | 7.2 | 2020-09-24 | The ping page of the administration panel in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via authenticated code injectio… |
CVE-2020-16147 | Critical | 9.8 | 2020-09-24 | The login page in Telmat AccessLog <= 6.0 (TAL_20180415) allows an attacker to get root shell access via Unauthenticated code injection over the network. |
CVE-2020-11699 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote c… |
CVE-2020-2276 | High | 8.8 | 2020-09-16 | Jenkins Selection tasks Plugin 1.0 and earlier executes a user-specified program on the Jenkins controller, allowing attackers with Job/Configure permission to… |
CVE-2020-2261 | High | 8.8 | 2020-09-16 | Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary comman… |
CVE-2020-24552 | Medium | 5.5 | 2020-09-10 | Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface… |
CVE-2020-24916 | Critical | 9.8 | 2020-09-09 | CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. |
CVE-2020-2038 | High | 7.2 | 2020-09-09 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root pr… |
CVE-2020-2037 | High | 7.2 | 2020-09-09 | An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root pr… |
CVE-2020-14342 | Medium | 4.4 | 2020-09-09 | It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker… |
CVE-2020-7730 | Critical | 9.8 | 2020-09-04 | The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param. |
CVE-2020-3430 | High | 8.8 | 2020-09-04 | A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2020-13802 | Critical | 9.8 | 2020-09-02 | Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification. |
CVE-2020-24354 | High | 8.8 | 2020-08-31 | Zyxel VMG5313-B30B router on firmware 5.13(ABCJ.6)b3_1127, and possibly older versions of firmware are affected by shell injection. |
CVE-2020-7712 | High | 7.2 | 2020-08-30 | This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function. |
CVE-2020-3454 | High | 7.2 | 2020-08-27 | A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that could be execu… |
CVE-2019-14904 | High | 7.3 | 2020-08-26 | A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checke… |
CVE-2020-15642 | High | 8.8 | 2020-08-25 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole 5.5.0.64. Although… |
CVE-2020-17384 | High | 7.2 | 2020-08-25 | Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remote… |
CVE-2020-24572 | High | 8.8 | 2020-08-24 | An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured (and virtually unrestricted) w… |
CVE-2020-24057 | High | 8.8 | 2020-08-21 | The management website of the Verint S5120FD Verint_FW_0_42 unit features a CGI endpoint ('ipfilter.cgi') that allows the user to manage network filtering on t… |
CVE-2020-24054 | Critical | 9.8 | 2020-08-21 | The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given process repeatedly a… |
CVE-2020-16282 | High | 8.8 | 2020-08-20 | In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local atta… |