CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- raspap raspap-webguiRaspAP raspap-webgui contains an OS Command Injection vulnerability8.7 High
- wftpserver wing ftp server, wing ftp server ftp server +1 moreWing FTP Server 6.3.8 - Remote Code Execution8.6 High
- midgetspy sickbeardSickbeard 0.1 - Remote Command Injection9.3 Critical
- totolink x6000rTOTOLINK X6000R Unauthenticated Command Injection Vulnerability9.2 Critical
- aliasrobotics caiCybersecurity AI vulnerable to command Injection through argument injection in find_file Agent tool9.7 Critical
- hikvision ds-3wap521-si, ds-3wap522-si, ds-3wap621e-si +3 more +5 moreSome Hikvision Wireless Access Points are vulnerable to authenticated command execution due to...7.2 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements...7.8 High
- dell unityvsa, unity operating environment +1 moreDell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special...7.8 High
- aelsantex runcommandaelsantex runcommand 2014-04-01, a plugin for DokuWiki, allows unauthenticated attackers to...9.8 Critical
- nvm-sh nvmCommand Injection in nvm via NVM_AUTH_HEADER in wget code path5.4 Medium
- gradle gradle-completiongradle-completion has a Bash command injection issue8.3 High
- inspektor-gadget, linuxfoundation inspektor gadget +1 moreInspektor Gadget has a Command Injection vulnerability in Makefile.build6.6 Medium
- ammarfaizi2 tea latexTea LaTex 1.0 - Remote Code Execution9.3 Critical
- ajentiAjenti 2.1.36 Authenticated Remote Code Execution8.7 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X set_mode sub_41E2A0 os command injection5.3 Medium
- d-link dir-615, dlink dir-615 firmware +1 moreD-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection8.6 High
- d-link dir-615, dlink dir-615 firmware +1 moreD-Link DIR-615 URL Filter set_temp_nodes.php os command injection8.6 High
- dokployDokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint9.9 Critical
- browserstack browserstack-local, red hat fuse 7 +1 moreBrowserStack Local vulnerable to Command Injection through logfile variable7.8 High
- nvidia runxNVIDIA runx contains a vulnerability where an attacker could cause a code injection. A successful...7.8 High
- hewlett packard enterprise (hpe) hpe aruba networking fabric composerInsecure File Handling allows Remote Code Execution in Backup Functionality7.2 High
- d-link dir-615, dlink dir-615 firmware +1 moreD-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection8.6 High
- wellchoose single sign-on portal systemWellChoose｜Single Sign-On Portal System - OS Command Injection8.7 High
- wellchoose single sign-on portal systemWellChoose｜Single Sign-On Portal System - OS Command Injection8.7 High
- litespeed technologies inc web server enterpriseLiteSpeed Web Server Enterprise 5.4.11 - Command Injection8.6 High
- katana network development starter kitKatana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability9.8 Critical
- mcp-server-siri-shortcutsmcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability7.8 High
- mcp manager for claude desktop manager for claude desktopMCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability8.8 High
- github-kanban-mcp-servergithub-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability9.8 Critical
- gemini mcp tool gemini-mcp-toolgemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability9.8 Critical
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability8.1 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability7.5 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability7.5 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability7.2 High
- algo 8180 ip audio alerter, algosolutions 8180 ip audio alerter firmware +1 moreALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability7.2 High
- ollama mcp server mcp serverOllama MCP Server execAsync Command Injection Remote Code Execution Vulnerability9.8 Critical
- doogee note59 firmware, note59 pro\+ firmware, note59 pro firmware +2 moreAn OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59,...7.8 High
- runtipiRuntipi is Vulnerable to Authenticated Arbitrary Remote Code Execution8.1 High
- sangfor operation and maintenance management system, operation and maintenance security management system +1 moreSangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection8.7 High
- ruijie networks co., ltd. ap180(ja) v1.xx, ap180(ja) v2.xx, ap180(jp) v1.xx +6 more +8 moreAP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection...8.6 High
- apryse html2pdfAn issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10....9.8 Critical
- yodinfo mini mouseMini Mouse 9.2.0 - Remote Code Execution9.3 Critical
- @tinacms graphql, hasura graphql engine +1 moreHasura GraphQL 1.3.3 - Remote Code Execution9.3 Critical
- cloudflare wranglerOS Command Injection in `wrangler pages deploy`7.7 High
- Show moreLoading…