Command injection.

GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection

• GeoVision Inc. GV-LPC2011/LPC2211
• Command injection

GV-LPC2011/LPC2211 - Wireless SSID Command Injection

• GeoVision Inc. GV-LPC2011/LPC2211
• Command injection

GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection

• GeoVision Inc. GV-LPC2011/LPC2211
• Command injection

GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection

• GeoVision Inc. GV-LPC2011/LPC2211
• Command injection

Checkov by Prisma Cloud: OS Command Injection Vulnerability

• Palo Alto Networks Checkov by Prisma Cloud
• Command injection

Cortex XDR Broker VM: Privilege Escalation Vulnerability

• Palo Alto Networks Cortex XDR Broker VM
• Command injection

PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• Command injection

Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

• AWS Labs postgres MCP Server
• Command injection
• CWE-184

Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Command injection

Authenticated Remote Code Execution in CPPM Web Interface

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Command injection

OS command injection in Schneider Electric PowerLogic T300

• Schneider Electric PowerLogic T300
• Command injection

Argument injection in Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as…

• Schneider Electric EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert)
• Command injection

OS command injection in Dell PowerScale OneFS

• Dell PowerScale OneFS
• Command injection

OS command injection in Dell iDRAC9 and others

• Dell iDRAC9
• Dell iDRAC10
• Command injection

Command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

Command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

Command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

Command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

OS command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

Command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

Duplicate Advisory: GitPython 3.1.59: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle

• Command injection

>=3.1.59 · no fixed version yet

OS command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination

• nfriedly bestzip
• Command injection

Tanium addressed an unauthorized code execution vulnerability in Enforce.

• Tanium Enforce
• Command injection

Composer arbitrary command execution via a malicious package's Perforce source URL

• Command injection

>=1.0, <2.2.30 || >=2.3.0, <2.10.3 · fixed in 2.2.30, 2.10.3

Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing

• Okta Access Gateway
• Command injection

Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument

• Okta Privileged Access Client
• Command injection

GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)

• Path traversal
• Command injection

<3.1.59 · fixed in 3.1.59

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

• Adobe Campaign Classic
• Command injection

GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()

• Command injection
• Information disclosure

<3.1.59 · fixed in 3.1.59

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

• Command injection
• Code injection

<3.1.59 · fixed in 3.1.59

Semaphore U: OS Command Injection

• Command injection

<0.0.0-20260704181911-7e8a9434bd81 · fixed in 0.0.0-20260704181911-7e8a9434bd81

Microsoft Azure CLI Remote Code Execution Vulnerability

• Microsoft Azure CLI
• Command injection

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

• Microsoft Visual Studio Code
• Command injection

Azure HDInsight Ambari Elevation of Privilege Vulnerability

• Microsoft Azure HDInsight
• Command injection

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Command injection

Command injection in Fortinet FortiSandbox

• Fortinet FortiSandbox
• Command injection

Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

• grokability snipe-it
• Command injection

Netis NX10 OS Command Injection via Ping Diagnostic Handler

• Netis Systems NX10
• Command injection

Command Argument Injection Vulnerability in Cosminexus Component Container

• Hitachi Cosminexus Component Container
• Command injection

OS Command Injection Vulnerability in Cosminexus Component Container

• Hitachi Cosminexus Component Container
• Command injection

Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Command injection

Duplicate Advisory: knowns vulnerable to command injection

• Command injection

<0.30.0 · fixed in 0.30.0

OS command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

OS command injection in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Command injection

LibreNMS before 26.8.0 Argument Injection via graph_title

• librenms
• Command injection

OS command injection in Dell Secure Connect Gateway (SCG) 5.0 Application and others

• Dell Secure Connect Gateway (SCG) 5.0 Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Command injection

Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

• Linksys RE7000
• Command injection

D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

• D-Link DIR-895L
• Other injection
• Command injection

OS command injection in OpenVPN

• OpenVPN
• Command injection

Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection

• Advantech WISE-6610-NB
• Advantech WISE-6610-EB
• Other injection
• Command injection

Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection

• Advantech WISE-6610-NB
• Advantech WISE-6610-EB
• Other injection
• Command injection

Tenda HG10 Boa formgponConf os command injection

• Tenda HG10
• Command injection

Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection

• Tenda CP3
• Command injection

Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection

• Tenda CP3
• Command injection

Tenda CP3 NetCheckPing.cpp os command injection

• Tenda CP3
• Command injection

Tenda CP3 Kylin system.c SystemAsh os command injection

• Tenda CP3
• Command injection

SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

• Mikrotik RouterOS
• Command injection

OS command injection in SonicWall Network Security Manager (NSM)

• SonicWall Network Security Manager (NSM)
• Command injection