CWE-78
5,951 CVEs • Abstraction: Base • Likelihood of Exploit: High
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CVEs (5,951)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Netgear 10M4200 10mg Poe+ Firmware M4300 12x12f FirmwareM4300 24x24f Firmware+7 moreNov 21, 2024 Apr 28, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300...Show more |
NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory. |
An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discover...Show more |
pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitization. |
1Netgear 9D7800 Firmware R6700 FirmwareR6900 Firmware+6 moreNov 21, 2024 Apr 27, 2020 N/A· v4 6.8 MEDIUM· v3 5.2 MEDIUM· v2 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R7500v2 before 1.0.3.24, R7800...Show more |
1Netgear 5D7800 Firmware Dm200 FirmwareR6100 Firmware+2 moreNov 21, 2024 Apr 27, 2020 N/A· v4 6.8 MEDIUM· v3 5.2 MEDIUM· v2 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, and R...Show more |
1Netgear 7D7800 Firmware R7500 FirmwareR7800 Firmware+4 moreNov 21, 2024 Apr 27, 2020 N/A· v4 6.8 MEDIUM· v3 5.2 MEDIUM· v2 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR43...Show more |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. |
Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account. |
1F5 1Big Iq Centralized Management Nov 21, 2024 Apr 24, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the BIG-IQ user interface. |
1Netgear 2R6220 Firmware Wndr3700 FirmwareNov 21, 2024 Apr 23, 2020 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.64 and WNDR3700v5 before 1.1.0.54. |
1Netgear 16D6400 Firmware Ex6200 FirmwareEx7000 Firmware+13 moreNov 21, 2024 Apr 23, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8, R6300v2 before 1.0.4.6,...Show more |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. |