CWE-78 · OS Command Injection (page 61)
Page 61 of 65 — CVEs classified under CWE-78, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7448 | High | 7.5 | 2018-02-26 | Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject arbitrary PHP code… |
CVE-2018-7440 | Critical | 9.8 | 2018-02-23 | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command injection via a $(command) approach in the gplot rootname argu… |
CVE-2018-7046 | High | 7.2 | 2018-02-20 | Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .N… |
CVE-2018-7187 | High | 8.8 | 2018-02-16 | The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only checks for "://" an… |
CVE-2017-14535 | High | 8.8 | 2018-02-16 | trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php. |
CVE-2017-6230 | High | 8.8 | 2018-02-14 | Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Comm… |
CVE-2017-6229 | High | 8.8 | 2018-02-14 | Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13… |
CVE-2018-6911 | Critical | 9.8 | 2018-02-13 | The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a single argument (aka th… |
CVE-2018-6926 | High | 7.2 | 2018-02-12 | In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and Cent… |
CVE-2018-1000043 | Critical | 9.8 | 2018-02-09 | Security Onion Solutions Squert version 1.0.1 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command In… |
CVE-2018-1000042 | Critical | 9.8 | 2018-02-09 | Security Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command In… |
CVE-2018-1000019 | High | 8.8 | 2018-02-09 | OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated attacker wi… |
CVE-2018-0514 | Critical | 9.8 | 2018-02-08 | MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CVE-2018-0512 | Medium | 6.8 | 2018-02-08 | Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspe… |
CVE-2018-0122 | Medium | 4.4 | 2018-02-08 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local atta… |
CVE-2018-6791 | Medium | 6.8 | 2018-02-07 | An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thumbdrive that contains `` or $() in its v… |
CVE-2018-1185 | Medium | 6.7 | 2018-02-03 | An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior… |
CVE-2018-1184 | Medium | 6.7 | 2018-02-03 | An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior… |
CVE-2018-6388 | High | 8.8 | 2018-01-29 | iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping t… |
CVE-2018-6353 | High | 7.8 | 2018-01-27 | The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a… |
CVE-2018-0506 | Critical | 9.8 | 2018-01-26 | Nootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CVE-2017-1000393 | High | 8.8 | 2018-01-26 | Jenkins 2.73.1 and earlier, 2.83 and earlier users with permission to create or configure agents in Jenkins could configure a launch method called 'Launch agen… |
CVE-2018-1000006 | High | 8.8 | 2018-01-24 | GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron ap… |
CVE-2017-1000502 | High | 8.8 | 2018-01-24 | Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands on the master node… |
CVE-2017-17407 | Critical | 9.8 | 2018-01-23 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Aut… |
CVE-2017-16608 | Critical | 9.8 | 2018-01-23 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required… |
CVE-2017-16602 | High | 8.8 | 2018-01-23 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Alth… |
CVE-2016-10709 | High | 8.8 | 2018-01-22 | pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, rela… |
CVE-2017-15108 | High | 7.8 | 2018-01-20 | spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with access to the session th… |
CVE-2017-14094 | Critical | 9.8 | 2018-01-19 | A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cr… |
CVE-2017-18044 | Critical | 9.8 | 2018-01-19 | A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvau… |
CVE-2018-0115 | Medium | 6.7 | 2018-01-18 | A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbit… |
CVE-2018-0099 | High | 8.8 | 2018-01-18 | A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, remote attacker to perform a command inje… |
CVE-2018-5371 | High | 8.8 | 2018-01-12 | diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticated remote attackers… |
CVE-2018-5347 | Critical | 9.8 | 2018-01-12 | Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs… |
CVE-2017-18025 | Critical | 9.8 | 2018-01-09 | cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field… |
CVE-2017-16666 | High | 8.8 | 2018-01-05 | Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. NOTE: this… |
CVE-2017-1000487 | Critical | 9.8 | 2018-01-03 | Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings. |
CVE-2017-1000473 | High | 7.8 | 2018-01-03 | Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code… |
CVE-2014-8389 | Critical | 9.8 | 2017-12-28 | cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware… |
CVE-2017-17888 | High | 8.8 | 2017-12-27 | cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-D… |
CVE-2017-17411 | Critical | 9.8 | 2017-12-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit th… |
CVE-2017-5255 | High | 8.8 | 2017-12-20 | In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenti… |
CVE-2017-15049 | High | 8.8 | 2017-12-19 | The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allo… |
CVE-2017-17758 | High | 8.8 | 2017-12-19 | TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dh… |
CVE-2017-17757 | High | 8.8 | 2017-12-19 | TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wp… |
CVE-2017-17105 | Critical | 9.8 | 2017-12-19 | Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injecti… |
CVE-2017-15103 | High | 8.8 | 2017-12-18 | A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to… |
CVE-2017-10904 | Critical | 9.8 | 2017-12-16 | Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CVE-2017-17405 | High | 8.8 | 2017-12-15 | Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a lo… |
CVE-2017-16921 | High | 8.8 | 2017-12-08 | In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS… |
CVE-2017-17458 | Critical | 9.8 | 2017-12-07 | In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks… |
CVE-2017-17055 | Critical | 9.0 | 2017-12-07 | Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the u… |
CVE-2016-1253 | Critical | 9.8 | 2017-12-05 | The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers… |
CVE-2017-10902 | Critical | 9.8 | 2017-12-01 | PTW-WMS1 firmware version 2.000.012 allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CVE-2017-1000159 | High | 7.8 | 2017-11-27 | Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91. |
CVE-2017-1000214 | Critical | 9.8 | 2017-11-27 | GitPHP by xiphux is vulnerable to OS Command Injections |
CVE-2017-16960 | High | 8.8 | 2017-11-27 | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field o… |
CVE-2017-16958 | High | 8.8 | 2017-11-27 | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field o… |
CVE-2017-16957 | High | 8.8 | 2017-11-27 | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of a… |
CVE-2017-16934 | Critical | 9.8 | 2017-11-24 | The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtd… |
CVE-2017-16926 | Critical | 9.8 | 2017-11-22 | Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing… |
CVE-2017-16923 | High | 8.8 | 2017-11-21 | Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V… |
CVE-2017-1000215 | Critical | 9.8 | 2017-11-17 | ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution |
CVE-2017-1000203 | High | 8.8 | 2017-11-17 | ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution |
CVE-2017-1000235 | Critical | 9.8 | 2017-11-17 | I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised. |
CVE-2017-1000220 | Critical | 9.8 | 2017-11-17 | soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution |
CVE-2017-1000219 | Critical | 9.8 | 2017-11-17 | npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user |
CVE-2017-12305 | Medium | 6.7 | 2017-11-16 | A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands, aka Debug Shel… |
CVE-2017-12636 | High | 7.2 | 2017-11-14 | CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries… |
CVE-2017-1453 | High | 8.8 | 2017-11-13 | IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-cra… |
CVE-2017-16667 | High | 7.8 | 2017-11-08 | backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts o… |
CVE-2017-16641 | High | 7.2 | 2017-11-07 | lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save reques… |
CVE-2017-2917 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can caus… |
CVE-2017-2890 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets ca… |
CVE-2017-2866 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command in… |
CVE-2017-12243 | High | 7.8 | 2017-11-02 | A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Secu… |
CVE-2017-10953 | High | 8.8 | 2017-10-31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to e… |
CVE-2017-9377 | High | 8.8 | 2017-10-30 | A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker wi… |
CVE-2017-15924 | High | 7.8 | 2017-10-27 | In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request recei… |
CVE-2017-7341 | High | 7.2 | 2017-10-26 | An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management… |
CVE-2017-10955 | High | 8.8 | 2017-10-19 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. Authentication is requir… |
CVE-2017-3761 | Critical | 9.8 | 2017-10-17 | The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead… |
CVE-2017-6224 | High | 8.8 | 2017-10-13 | Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP F… |
CVE-2017-6223 | High | 8.8 | 2017-10-13 | Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in… |
CVE-2017-15226 | Critical | 9.8 | 2017-10-10 | Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex are used directly in a popen call. |
CVE-2017-1000116 | Critical | 9.8 | 2017-10-05 | Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks. |
CVE-2017-11322 | High | 8.2 | 2017-10-03 | The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter… |
CVE-2017-11321 | High | 7.2 | 2017-10-03 | The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters… |
CVE-2017-14867 | High | 8.8 | 2017-09-29 | Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands s… |
CVE-2017-14001 | High | 8.8 | 2017-09-26 | An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulne… |
CVE-2017-14705 | High | 8.1 | 2017-09-22 | DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter… |
CVE-2017-11395 | High | 8.8 | 2017-09-22 | Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated ac… |
CVE-2015-3431 | Critical | 9.8 | 2017-09-19 | Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnera… |
CVE-2017-14500 | High | 8.8 | 2017-09-17 | Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote att… |
CVE-2017-9328 | Critical | 9.8 | 2017-09-15 | Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root. |
CVE-2017-10813 | Medium | 6.8 | 2017-09-15 | CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. |
CVE-2017-14429 | Critical | 9.8 | 2017-09-13 | The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenti… |
CVE-2017-14405 | High | 7.2 | 2017-09-13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_de… |
CVE-2017-6796 | Medium | 6.7 | 2017-09-07 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers could allow an authenticated, local… |