CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- typoraTypora 1.7.4 OS Command Injection via Export PDF Preferences8.5 High
- freepbxFreePBX 16 Authenticated Remote Code Execution via API Module8.7 High
- renginereNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration8.7 High
- vexorian dizquetvdizqueTV 1.5.3 Remote Code Execution via FFMPEG Executable Path9.3 Critical
- ibm aspera orchestratorIBM Aspera Orchestrator Command Injection8.8 High
- webminsquid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments. This is relevant if...8.5 High
- ruijie rg-nbs5100-24gt4sfp firmware, rg-s1930 firmware +1 moreOS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing...8.8 High
- ruijie rg-bcr860 firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie rg-ew1200 firmware, rg-x60 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing...7.8 High
- ruijie rg-ew1200g pro firmware, rg-ew1300g firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4...8.8 High
- ruijie rg-ew1800gx firmware, rg-ew1800gx pro firmware, rg-ew300n firmware +2 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117...8.8 High
- ruijie rg-ew1200 firmware, rg-x60 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing...8.8 High
- ruijie rg-ew3200gx firmware, rg-x60 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing...8.8 High
- ruijie rg-est310 firmware, x30 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie m18-ew firmware, rg-ew1300g firmware +1 moreOS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers...8.8 High
- ruijie reyee os, rg-eap602 firmware, rg-est310 v2 firmware +1 more +3 moreOS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx...8.8 High
- ruijie rg-bcr860 firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute...8.8 High
- ruijie rg-bcr860 firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute...8.8 High
- ruijie rg-bcr860 firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute...8.8 High
- ruijie rg-eap602 firmware, rg-est310 firmware, rg-est350 firmware +2 more +4 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie rg-est350 firmware, rg-ew1800gx firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing...8.8 High
- ruijie rg-ew1800gx firmware, rg-ew300r firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing...8.8 High
- ruijie m18-ew firmware, rg-ew1200r firmware +1 moreOS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers...8.8 High
- ruijie reyee os, rg-eap602 firmware, rg-est310 v2 firmware +1 more +3 moreOS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to...8.8 High
- ruijie rg-ew300 pro firmware, x30 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-ew1800gx pro firmware, rg-ew300n firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie rg-eap602 firmware, rg-ew1200g pro firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4...8.8 High
- ruijie rg-ew300 pro firmware, x30 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-eap602 firmware, rg-ew300 pro firmware, x30 pro firmware +2 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-ew300t firmware, x30 pro firmware +1 moreOS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-ew1800gx firmware, rg-ew300r firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing...8.8 High
- ruijie rg-ew1200g pro firmware, rg-ew1200r firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4...8.8 High
- ruijie m18-ew firmware, rg-ew300g pro firmware +1 moreOS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers...8.8 High
- ruijie rg-bcr860 firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie rg-ew1200 firmware, rg-x60 firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200...8.8 High
- ruijie rg-ew1200 firmware, rg-ew300 pro firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200...8.8 High
- ruijie reyee os, rg-eap602 firmware, rg-est310 v2 firmware +1 more +3 moreOS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117...8.8 High
- ruijie reyee os, rg-eap602 firmware, rg-est310 v2 firmware +1 more +3 moreOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to...8.8 High
- ruijie rg-bcr600w firmwareOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute...8.8 High
- ruijie be50 firmware, rg-ew1300g firmware +1 moreOS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing...8.8 High
- ruijie rg-rap2200\(e\) firmware, ruijienetworks reyee os +1 moreOS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute...8.8 High
- windscribe, windscribe for linux desktop app +1 moreWindscribe for Linux 'changeMTU' local privilege escalation7.3 High
- jenkins git client, jenkins project git client plugin +1 moreJenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin5.0 Medium
- selea targa ip ocr-anpr camera, carplateserver, izero box full firmware +10 more +12 moreSelea Targa IP Camera Remote Code Execution via Utils9.3 Critical
- fortinet fortisandbox, fortisandbox cloud +1 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...6.9 Medium
- fortinet fortisandboxAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...7.0 High
- Show moreLoading…