CWE-77: Command injection
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in a Command.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Command Injection Vulnerabilities in the Web-Based Management Interface of AOS-8 and AOS-107.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface7.2 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreAuthenticated Remote Code Execution via Arbitrary File Write in AOS-8 and AOS-10 Web-Based Management Interface7.2 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) arubaos (aos) +1 moreAuthenticated Command Injection leads to RCE in AOS-10 CLI Command7.2 High
- mongodb ops managerOps Manager RCE via webhook body9.4 Critical
- microsoft outlook for ios, outlook +1 moreMicrosoft Outlook for iOS Tampering Vulnerability7.4 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- dragonmonk111 junoclawJunoClaw: plugin-shell shell-metacharacter injection via shell wrapper8.4 High
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreOS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform6.5 Medium
- sap se forecasting & replenishmentOS Command Injection Vulnerability in SAP Forecasting & Replenishment8.2 High
- d-link dir-816, dlink dir-816 firmware +1 moreD-Link DIR-816 portForward command injection5.3 Medium
- d-link dir-816, dlink dir-816 firmware +1 moreD-Link DIR-816 singlePortForward sub_445E7C command injection5.3 Medium
- d-link dir-816, dlink dir-816 firmware +1 moreD-Link DIR-816 formDMZ.cgi sub_445E7C command injection5.3 Medium
- d-link dns-320, dlink dns-320 firmware +1 moreD-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection5.1 Medium
- d-link dns-320, dlink dns-320 firmware +1 moreD-Link DNS-320 webfile_mgr.cgi chown os command injection5.1 Medium
- d-link dns-320, dlink dns-320 firmware +1 moreD-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection5.1 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 httpd getLogFile get_log_file os command injection5.1 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 httpd WifiApScan formWifiApScan os command injection5.3 Medium
- tenda ac6, ac10u firmware +1 moreTenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection5.1 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 httpd telnet os command injection5.1 Medium
- dlink dcs-932l firmwareD-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the...7.3 High
- No product listedEDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with...8.8 High
- 8421bit miniclaw8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection5.1 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 login.cgi sys_login1 os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 wireless.cgi WifiBasic os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 wireless.cgi advance os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 adm.cgi wzdapMesh os command injection5.3 Medium
- industrial application software ias canias erpIndustrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection5.3 Medium
- aandrew-me tgptaandrew-me tgpt Update helper.go helper.Update command injection4.8 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 adm.cgi wzdap os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 adm.cgi wifi_region os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 adm.cgi wan os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 adm.cgi wzdrepeater os command injection5.3 Medium
- wavlink nu516u1, wl-nu516u1 firmware +1 moreWavlink NU516U1 adm.cgi change_wifi_password os command injection5.3 Medium
- termix-ssh termixTermix: Command injection in extractArchive/compressFiles via double-quote escaping bypass8.7 High
- No product listedA Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows...7.3 High
- No product listed/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to...6.3 Medium
- prusa3d prusaslicerIn libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project...5.3 Medium
- 8421bit miniclaw8421bit MiniClaw kernel.ts executeCognitivePulse os command injection5.3 Medium
- microsoft azure cloud shellAzure Cloud Shell Spoofing Vulnerability9.6 Critical
- microsoft copilot chat (microsoft edge), copilot chat +1 moreCopilot Chat (Microsoft Edge) Information Disclosure Vulnerability7.5 High
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director Command Injection Vulnerability6.4 Medium
- hcl bigfix runbookaiHCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability8.8 High
- gitoxide, gitoxide gix, gix-submodule +2 moregitoxide - Command Injection via Partial .gitmodules Override in gix-submodule7.3 High
- efm iptime c200EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection8.6 High
- totolink a8000ruTotolink A8000RU cstecgi.cgi setAppFilterCfg os command injection9.3 Critical
- 54yyyu code-mcp54yyyu code-mcp MCP Tool server.py git_operation command injection6.9 Medium
- Show moreLoading…