Advisories · Weakness
Command injection.
Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.4 High
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
- HP Inc. HP Linux Imaging and Printing Software (HPLIP)
- Command injection
- CVSS 6.8 Medium
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
- HP Inc. HP Linux Imaging and Printing Software (HPLIP)
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Cisco Identity Services Engine Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Cisco Identity Services Engine Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
- CVSS 7.3 High
OS command injection in Dell Update Package Framework
- Dell Update Package Framework
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Ruijie RG-EW3000GX user_list_note admin os command injection
- Ruijie RG-EW3000GX
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection
- Ruijie RG-EW3000GX
- Command injection
- CVSS 8.6 High
OS command injection in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
OS command injection in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Command injection
- CVSS 8.6 High
OS command injection in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Command injection
- CVSS 8.6 High
OS command injection in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Command injection
- CVSS 8.6 High
OS command injection in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Command injection
- CVSS 8.6 High
OS command injection in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Unauthorized remote code execution in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Command Injection in T-Mobile 5G Box IDU router via ping functionality
- WNC T-Mobile 5G Box IDU
- Command injection
- CVSS 8.6 High
Security Advisory 0165
- Arista Networks EOS
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Remote code execution via uploading a malicious IODD file
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 7.2 High
Command Injection via PUT in /api/datastorage/data
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 7.2 High
Command Injection via GET in /api/datastorage/data
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 7.2 High
Command Injection via PUT in /api/iodd/config
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 7.2 High
Command Injection via GET in /api/iodd/config
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 7.2 High
Command Injection via DELETE in /api/status/data
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection via GET in /api/status/data
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in /index.php/attached_devices_tab/ajax_remove_uploaded_iodd_files
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in /index.php/ajax/save_iodd_parameters
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in /index.php/ajax/parameterManage
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in Field_Shadow_Password Class
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in /index.php/attached_devices_tab/do_upload
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in /index.php/ajax/get_iodd_port_info
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 8.8 High
Command Injection in /index.php/ajax/get_iodd_menu_info
- Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
- Pepperl+Fuchs ICE2-8IOL-G65L-V1D
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request
- Arista Networks EOS
- Command injection
- CVSS 7.5 High
Security Advisory 0181
- Arista Networks VeloCloud Edge
- Command injection
- CVSS 8.6 High
Netcore NR255-V 1.5.130703 OS Command Argument Injection via Unquoted DDNS Parameters
- Netcore NR255-V
- Command injection
- CVSS 8.7 High
Netcore NR255-V 1.5.130703 OS Command Argument Injection in Nettools tcpdump Launch Paths
- Netcore NR255-V
- Command injection
- CVSS 7.1 High
Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling
- web-infra-dev rsbuild
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
- ShaneIsrael fireshare
- Command injection
- CVSS 6.5 Medium
Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Command injection
- CVSS 7.2 High
Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways
- Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
- Command injection
- CVSS 7.1 High
githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
- gouef githubtoplanguages
- Command injection
- CVSS 8.5 High
Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
- GitLab
- Command injection
- CVSS 5.3 Medium
TOTOLINK X5000R Export Ovpn cstecgi.cgi exportOvpn os command injection
- TOTOLINK X5000R
- Command injection
- CVSS 8.3 High
Flowise before 3.1.4 Script Injection via Docker Workflows
- Flowise
- Command injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
- Flowise
- Command injection
- CVSS 7.3 High
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Conflibot: Command injection via crafted pull request branch names under pull_request_target
- wktk conflibot
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Arbitrary command execution in TrxTimeATTENDANCE
- TREXOM TrxTimeATTENDANCE
- Command injection
- CVSS 7.0 High
OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution
- WSO2 Integrator: MI for Visual Studio Code
- Command injection
- CVSS 8.7 High
OS command injection in LITE-ON Technology Corporation FF-RFI079I4 and others
- LITE-ON Technology Corporation FF-RFI079I4
- LITE-ON Technology Corporation FF-RFI078I4
- Command injection
- CVSS 5.3 Medium
D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection
- D-Link DSL-3782
- Other injection
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
EFM ipTIME C200E System Setup iux_set.cgi os command injection
- EFM ipTIME C200E
- Command injection
- CVSS 6.9 Medium
SabyasachiRana WebMap New Nmap Scan functions_nmap.py nmap_newscan os command injection
- SabyasachiRana WebMap
- Command injection
- CVSS 8.8 High
An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component
- Command injection
- CVSS 6.3 Medium
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
- IBM i Access Family
- Command injection
- CVSS 6.3 Medium
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
- IBM i Access Family
- Command injection
- CVSS 6.3 Medium
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
- IBM i Access Family
- Command injection
- CVSS 8.8 High
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
- CVSS 8.8 High
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
- IBM DataStage on Cloud Pak for Data
- Command injection
- CVSS 7.8 High
IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- IBM App Connect Enterprise
- Command injection