← Back
CWE-78

6,626 CVEs • Abstraction: Base • Likelihood of Exploit: High

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

JSON object

Loading...

CVEs (6,626)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Sophos
1Web Appliance Firmware
Apr 29, 2026
Sep 10, 2013
N/A· v4
N/A· v3
10.0 HIGH· v2
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to...Show more
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php.Show less
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896.
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249.
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122.
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
10.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 3...Show more
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983.Show less
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 3450...Show more
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502.Show less
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 3347...Show more
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476.Show less
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080.
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Re...Show more
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595.Show less
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified...Show more
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.Show less
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
10.0 HIGH· v2
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
10.0 HIGH· v2
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091.
1Paloaltonetworks
1Pan Os
Apr 29, 2026
Aug 31, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID...Show more
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116.Show less
1Cisco
8Application And Content Networking System Software
Enterprise Content Delivery Network SoftwareInternet Streamer Content Delivery System+5 more
Apr 29, 2026
Aug 1, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS...Show more
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.Show less
1Symantec
3Web Gateway
Web Gateway Appliance 8450Web Gateway Appliance 8490
Apr 29, 2026
Aug 1, 2013
N/A· v4
N/A· v3
8.3 HIGH· v2
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script.
1Siemens
2Enterprise Openscape Branch
Openscape Session Border Controller
Apr 29, 2026
Jul 18, 2013
N/A· v4
N/A· v3
10.0 HIGH· v2
core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspec...Show more
core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors.Show less
1Wave
2Embassy Remote Administration Server
Embassy Remote Administration Server Help Desk
Apr 29, 2026
Jul 15, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearch...Show more
SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field), leading to execution of operating-system commands.Show less
1Hp
1System Management Homepage
Apr 29, 2026
Jun 14, 2013
N/A· v4
N/A· v3
9.0 HIGH· v2
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATH_INFO to smhutil/snmpchp.php.en.
1Kelly D. Redding
1Kelredd Pruview
Apr 29, 2026
Apr 25, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.
1Documentcloud
1Karteek Docsplit
Apr 29, 2026
Apr 25, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a...Show more
The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename.Show less