CWE-78 · OS Command Injection (page 53)
Page 53 of 70 — CVEs classified under CWE-78, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7786 | Critical | 9.8 | 2021-02-08 | This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js. |
CVE-2020-7785 | Critical | 9.8 | 2021-02-08 | This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js. |
CVE-2020-7782 | Critical | 9.8 | 2021-02-08 | This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/gene… |
CVE-2021-26541 | Critical | 9.8 | 2021-02-08 | The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability. |
CVE-2020-11920 | Critical | 9.8 | 2021-02-08 | An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings… |
CVE-2021-3122 | Critical | 9.8 | 2021-02-07 | CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089)… |
CVE-2020-36243 | High | 8.8 | 2021-02-07 | The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To exploit the vulnerability, an authenti… |
CVE-2021-1370 | High | 7.8 | 2021-02-04 | A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L s… |
CVE-2021-1318 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1317 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1316 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1315 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2021-1314 | High | 7.2 | 2021-02-04 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an aut… |
CVE-2020-2507 | Critical | 9.8 | 2021-02-03 | The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run… |
CVE-2021-21289 | High | 7.4 | 2021-02-02 | Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and before version 2.7.7 there is a command… |
CVE-2020-7775 | Critical | 9.8 | 2021-02-02 | This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js. |
CVE-2021-25310 | High | 8.8 | 2021-02-02 | The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands wit… |
CVE-2020-18568 | Critical | 9.8 | 2021-02-02 | The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution. |
CVE-2020-25506 | Critical | 9.8 | 2021-02-02 | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution. |
CVE-2020-28494 | High | 8.6 | 2021-02-02 | This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command… |
CVE-2020-25036 | High | 8.8 | 2021-02-02 | UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights… |
CVE-2020-28426 | High | 7.3 | 2021-02-01 | All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId. |
CVE-2021-23330 | Critical | 9.8 | 2021-02-01 | All versions of package launchpad are vulnerable to Command Injection via stop. |
CVE-2020-5626 | High | 8.8 | 2021-01-28 | Logstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote attackers to execute arbitrary OS commands via a specially craft… |
CVE-2021-3317 | High | 8.8 | 2021-01-26 | KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter. |
CVE-2013-2512 | Critical | 9.8 | 2021-01-26 | The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP pro… |
CVE-2021-3291 | High | 7.2 | 2021-01-26 | Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command. |
CVE-2021-3190 | Critical | 9.8 | 2021-01-26 | The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. |
CVE-2020-36199 | Critical | 9.8 | 2021-01-26 | TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places. |
CVE-2020-35576 | High | 8.8 | 2021-01-26 | A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute… |
CVE-2020-27542 | Medium | 6.8 | 2021-01-26 | Rostelecom CS-C2SHW 5.0.082.1 is affected by: Bash command injection. The camera reads configuration from QR code (including network settings). The static IP c… |
CVE-2020-27298 | Medium | 6.5 | 2021-01-26 | Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (… |
CVE-2020-23826 | High | 8.8 | 2021-01-26 | The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a dup… |
CVE-2020-12513 | High | 7.5 | 2021-01-22 | Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection. |
CVE-2021-1142 | Critical | 9.8 | 2021-01-20 | Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands… |
CVE-2021-1141 | Critical | 9.8 | 2021-01-20 | Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands… |
CVE-2021-1140 | Critical | 9.8 | 2021-01-20 | Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands… |
CVE-2021-1139 | Critical | 9.8 | 2021-01-20 | Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands… |
CVE-2021-1138 | Critical | 9.8 | 2021-01-20 | Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands… |
CVE-2021-1264 | Critical | 9.6 | 2021-01-20 | A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnera… |
CVE-2021-23326 | Medium | 6.3 | 2021-01-20 | This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command… |
CVE-2021-0219 | Medium | 6.7 | 2021-01-15 | A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with pri… |
CVE-2021-0218 | High | 7.8 | 2021-01-15 | A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges… |
CVE-2020-29495 | Critical | 10.0 | 2021-01-14 | DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A remote unauthenticated attacker could p… |
CVE-2020-29017 | High | 8.8 | 2021-01-14 | An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the syste… |
CVE-2021-1150 | High | 7.2 | 2021-01-13 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated… |
CVE-2021-1149 | High | 7.2 | 2021-01-13 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated… |
CVE-2021-1148 | High | 7.2 | 2021-01-13 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated… |
CVE-2021-1147 | High | 7.2 | 2021-01-13 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated… |
CVE-2021-1146 | High | 7.2 | 2021-01-13 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated… |
CVE-2020-35578 | High | 7.2 | 2021-01-13 | An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload… |
CVE-2020-5685 | Critical | 9.8 | 2021-01-13 | UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to execute arbitrary OS commands or cause a denial-of-service (DoS) cond… |
CVE-2020-35459 | High | 7.8 | 2021-01-12 | An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via sh… |
CVE-2020-35458 | Critical | 9.8 | 2021-01-12 | An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_… |
CVE-2020-2508 | High | 7.2 | 2021-01-11 | A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary command… |
CVE-2020-5146 | High | 7.2 | 2021-01-09 | A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection using HTTP POST parameters. This vulnerabi… |
CVE-2020-7794 | Critical | 9.8 | 2021-01-08 | This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModu… |
CVE-2020-7784 | Critical | 9.8 | 2021-01-08 | This affects all versions of package ts-process-promises. The injection point is located in line 45 in main entry of package in lib/process-promises.js. The vu… |
CVE-2021-3029 | Critical | 9.8 | 2021-01-07 | EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulation. The parameter… |
CVE-2020-26085 | Critical | 9.9 | 2021-01-07 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-36178 | Critical | 9.8 | 2021-01-06 | oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (a… |
CVE-2020-26294 | High | 7.4 | 2021-01-04 | Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnera… |
CVE-2020-35851 | High | 8.1 | 2020-12-31 | HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute ar… |
CVE-2020-19664 | High | 8.8 | 2020-12-31 | DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi. |
CVE-2020-17363 | Critical | 9.9 | 2020-12-31 | USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredReque… |
CVE-2020-35789 | High | 8.8 | 2020-12-30 | NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user. |
CVE-2020-10209 | High | 8.1 | 2020-12-30 | Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria… |
CVE-2020-10208 | Critical | 9.9 | 2020-12-30 | Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows aut… |
CVE-2020-25847 | High | 8.8 | 2020-12-29 | This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in… |
CVE-2020-35729 | Critical | 9.8 | 2020-12-27 | KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter. |
CVE-2020-35715 | High | 8.8 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the u… |
CVE-2020-35714 | High | 8.8 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction… |
CVE-2020-35713 | Critical | 9.8 | 2020-12-26 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the gof… |
CVE-2020-28188 | Critical | 9.8 | 2020-12-24 | Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php… |
CVE-2020-35665 | Critical | 9.8 | 2020-12-23 | An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs… |
CVE-2020-29552 | Critical | 9.8 | 2020-12-23 | An issue was discovered in URVE Build 24.03.2020. By using the _internal/pc/vpro.php?mac=0&ip=0&operation=0&usr=0&pass=0%3bpowershell+-c+" substring, it is pos… |
CVE-2020-24581 | High | 8.0 | 2020-12-22 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable v… |
CVE-2020-26284 | High | 7.7 | 2020-12-21 | Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if t… |
CVE-2020-35606 | High | 8.8 | 2020-12-21 | Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root priv… |
CVE-2020-25494 | Critical | 9.8 | 2020-12-18 | Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-… |
CVE-2020-12522 | Critical | 10.0 | 2020-12-17 | The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-8… |
CVE-2020-8466 | Critical | 9.8 | 2020-12-17 | A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could all… |
CVE-2020-25094 | Critical | 9.8 | 2020-12-17 | LogRhythm Platform Manager 7.4.9 allows Command Injection. To exploit this, an attacker can inject arbitrary program names and arguments into a WebSocket. Thes… |
CVE-2020-26274 | Medium | 6.4 | 2020-12-16 | In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell strin… |
CVE-2020-7781 | Critical | 9.8 | 2020-12-16 | This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrates the vulnerabilit… |
CVE-2019-14479 | High | 8.8 | 2020-12-16 | AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code on the server runni… |
CVE-2020-25618 | High | 8.8 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effective… |
CVE-2020-35476 | Critical | 9.8 | 2020-12-16 | A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot… |
CVE-2020-26259 | Medium | 6.8 | 2020-12-16 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the loca… |
CVE-2020-25759 | High | 8.8 | 2020-12-15 | An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacke… |
CVE-2020-25757 | High | 8.8 | 2020-12-15 | A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulti… |
CVE-2020-20184 | Critical | 9.8 | 2020-12-14 | GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection. |
CVE-2020-5636 | Medium | 6.8 | 2020-12-14 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specially crafted request to a specific URL… |
CVE-2020-5635 | High | 8.8 | 2020-12-14 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may… |
CVE-2020-28440 | Critical | 9.8 | 2020-12-11 | All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function. |
CVE-2020-28439 | Critical | 9.8 | 2020-12-11 | This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js… |
CVE-2020-15357 | Critical | 9.8 | 2020-12-11 | Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell meta… |
CVE-2020-12149 | Medium | 6.8 | 2020-12-11 | The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config fi… |
CVE-2020-12148 | Medium | 6.8 | 2020-12-11 | A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary comm… |
CVE-2020-7789 | Medium | 5.6 | 2020-12-11 | This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sani… |