Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

CVEs (3,948)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-6609 1Phpmyadmin 1Phpmyadmin May 6, 2026 Dec 11, 2016 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15....Show more An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.Show less
CVE-2016-9835 1Zikula 1Zikula Application Framework May 6, 2026 Dec 5, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file.
CVE-2015-8969 1Squareup 1Git Fastclone May 6, 2026 Nov 3, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands i...Show more git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library.Show less
CVE-2015-8968 1Squareup 1Git Fastclone May 6, 2026 Nov 3, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary...Show more git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.Show less
CVE-2016-0328 1Ibm 1Security Guardium Database Activity Monitor May 6, 2026 Oct 22, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified...Show more IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows local users to obtain administrator privileges for command execution via unspecified vectors.Show less
CVE-2016-0326 1Ibm 2Rational Collaborative Lifecycle Management Rational Quality Manager May 6, 2026 Oct 22, 2016 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to ex...Show more IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."Show less
CVE-2016-0236 1Ibm 1Security Guardium Database Activity Monitor May 6, 2026 Oct 21, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the...Show more IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote authenticated users to execute arbitrary commands with root privileges via the search field.Show less
CVE-2016-0920 1Emc 1Avamar Server May 6, 2026 Sep 21, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration.
CVE-2016-6367 1Cisco 1Adaptive Security Appliance Software Apr 22, 2026 Aug 18, 2016 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
CVE-2016-2875 1Ibm 1Qradar Security Information And Event Manager May 6, 2026 Aug 8, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors.
CVE-2016-5640 1Crestron 1Airmedia Am 100 Firmware May 6, 2026 Aug 3, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parame...Show more Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the ATE_COMMAND parameter.Show less
CVE-2016-4822 1Corega 1Cg Wlbargl Firmware May 6, 2026 Jun 25, 2016 N/A· v4 8.0 HIGH· v3 5.2 MEDIUM· v2 Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors.
CVE-2016-1388 1Cisco 3Network Analysis Module Prime Network Analysis Module SoftwarePrime Virtual Network Analysis Module Software May 6, 2026 Jun 3, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote atta...Show more Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882.Show less
CVE-2015-0857 2Debian Tardiff Project 2Debian Linux Tardiff May 6, 2026 May 6, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.
CVE-2016-3081 3Apache HuaweiOracle 20Agile Controller Campus Firmware AnyofficeFirehunter6000 Firmware+17 more Oct 9, 2026 Apr 26, 2016 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
CVE-2016-2332 1Systech 1Syslink Sl 1000 Modular Gateway Firmware May 6, 2026 Apr 25, 2016 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066 (aka dnsmasq) param...Show more flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066 (aka dnsmasq) parameter.Show less
CVE-2016-2002 1Opentext 1Vertica May 6, 2026 Apr 20, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPo...Show more The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.Show less
CVE-2016-2056 2Debian Xymon 2Debian Linux Xymon May 6, 2026 Apr 13, 2016 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
CVE-2015-5349 1Apache 2Directory Studio Ldap Studio May 6, 2026 Apr 11, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that i...Show more The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.Show less
CVE-2016-2397 1Sonicwall 3Analyzer Global Management SystemUma Em5000 Firmware May 6, 2026 Feb 17, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted XML data.

Previous 1...193194195...198 Next