Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

CVEs (3,948)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-10322 1Synology 1Photo Station May 13, 2026 Apr 10, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php.
CVE-2016-6534 1Opmantek 1Network Management Information System May 13, 2026 Apr 10, 2017 N/A· v4 7.5 HIGH· v3 6.0 MEDIUM· v2 Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations.
CVE-2016-5067 1Sierrawireless 1Aleos Firmware May 13, 2026 Apr 10, 2017 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.
CVE-2016-5065 1Sierrawireless 1Aleos Firmware May 13, 2026 Apr 10, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection.
CVE-2016-10312 1Jensenofscandinavia 3Al3g Firmware Al5000ac FirmwareAl59300 Firmware May 13, 2026 Apr 3, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands...Show more Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.Show less
CVE-2016-8801 1Huawei 1Oceanstor 5600 V3 Firmware May 13, 2026 Apr 2, 2017 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 Huawei OceanStor 5600 V3 with V300R003C00C10 and earlier versions allows attackers with administrator privilege to inject a command into a specific command's parameters, and run this injected command with root privilege.
CVE-2014-9114 3Fedoraproject KernelOpensuse 3Fedora OpensuseUtil Linux May 13, 2026 Mar 31, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
CVE-2014-5009 3Nagios RedhatSnoopy 3Nagios OpenstackSnoopy May 13, 2026 Mar 31, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.
CVE-2014-5008 3Debian RedhatSnoopy 3Debian Linux OpenstackSnoopy May 13, 2026 Mar 31, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Snoopy allows remote attackers to execute arbitrary commands.
CVE-2008-7313 3Nagios RedhatSnoopy 3Nagios OpenstackSnoopy May 13, 2026 Mar 31, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
CVE-2017-6184 1Sophos 1Web Appliance May 13, 2026 Mar 30, 2017 N/A· v4 4.7 MEDIUM· v3 6.5 MEDIUM· v2 In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.
CVE-2017-6183 1Sophos 1Web Appliance May 13, 2026 Mar 30, 2017 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.
CVE-2016-4929 1Juniper 1Junos Space May 13, 2026 Mar 20, 2017 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user.
CVE-2015-8988 1Mcafee 1Epo Deep Command May 13, 2026 Mar 14, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of their choice via dro...Show more Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path.Show less
CVE-2017-5675 1Embedthis 1Goahead May 13, 2026 Mar 13, 2017 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an...Show more A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models. The mail-sending form in the mail.htm page allows an attacker to inject a command into the receiver1 field in the form; it will be executed with root privileges.Show less
CVE-2016-10194 1Festivaltts4r Project 1Festivaltts4r May 13, 2026 Mar 3, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.
CVE-2014-4677 1Gpgtools 1Libmacgpg May 13, 2026 Feb 22, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlPath argum...Show more The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlPath argument.Show less
CVE-2016-9684 1Dell 1Sonicwall Secure Remote Access Server May 13, 2026 Feb 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/vi...Show more The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.Show less
CVE-2016-9683 1Dell 1Sonicwall Secure Remote Access Server May 13, 2026 Feb 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI (/c...Show more The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI (/cgi-bin/extensionsettings) component responsible for handling some of the server's internal configurations. The CGI application doesn't properly escape the information it's passed when processing a particular multi-part form request involving scripts. The filename of the 'scriptname' variable is read in unsanitized before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. This is SonicWall Issue ID 181195.Show less
CVE-2016-9682 1Dell 1Sonicwall Secure Remote Access Server May 13, 2026 Feb 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi...Show more The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi-bin/diagnostics) component responsible for emailing out information about the state of the system. The application doesn't properly escape the information passed in the 'tsrDeleteRestartedFile' or 'currentTSREmailTo' variables before making a call to system(), allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.Show less

Previous 1...191192193...198 Next