CWE-88: Argument Injection
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
Also known as Improper Neutralization of Argument Delimiters in a Command.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os, fx-os +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os, fx-os +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability6.7 Medium
- cisco nx-os software, nx-os, firepower extensible operating system +2 moreCisco FXOS and NX-OS Software Command Injection Vulnerability4.2 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)4.4 Medium
- crestron am-100 firmware, am-101 firmware, airmedia +2 moreCrestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to...8.8 High
- microsoft edge, internet explorer 10, internet explorer 11 +2 more +4 moreA tampering vulnerability exists when Microsoft browsers do not properly validate input under...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability was discovered where specific command line arguments are not properly discarded...9.8 Critical
- google chrome, opensuse backports, leap +2 moreIncorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a...5.5 Medium
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in verbose7.5 High
- cisco mds 9000 series multilayer switches, nexus 3000 series switches, nexus 3500 platform switches +5 more +7 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)4.2 Medium
- cisco firepower 4100 series next-generation firewalls, firepower 9300 security appliance, mds 9000 series multilayer switches +9 more +11 moreCisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)4.2 Medium
- cisco nexus 3000 series switches, nexus 3500 platform switches, nx-os +2 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610)4.2 Medium
- cisco mds 9000 series multilayer switches, nexus 3000 series switches, nexus 3500 platform switches +5 more +7 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)4.2 Medium
- cisco mds 9000 series multilayer switches, nexus 7000 and 7700 series switches, nx-os +2 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608)4.2 Medium
- cisco nexus 7000 and 7700 series switches, nx-os +1 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607)4.2 Medium
- cisco nexus 9000 series switches in standalone nx-os mode, nx-os, nexus 3000 series switches +1 more +3 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)5.3 Medium
- atlassian sourcetree, sourcetree for macos +1 moreThere was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2...8.8 High
- mircmIRC before 7.55 allows remote command execution by using argument injection through custom URI...8.1 High
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by...9.8 Critical
- php, canonical ubuntu linux, debian linux +1 more +3 moreUniversity of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other...7.5 High
- amazon fire oskernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd)...7.5 High
- amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...7.5 High
- amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...7.5 High
- amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...7.5 High
- amazon fire oskernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD...7.5 High
- amazon fire oskernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire...4.4 Medium
- amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...7.5 High
- git-scm git, canonical ubuntu linux, debian linux +8 more +10 moreGit before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...9.8 Critical
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the smart cameras RTSP configuration of the Samsung...9.9 Critical
- atlassian sourcetree, sourcetree for windows +1 moreThere was an argument injection vulnerability in Sourcetree for Windows via filenames in...8.1 High
- atlassian sourcetree, sourcetree for macos +1 moreThere was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial...9.8 Critical
- cisco vbond orchestrator, vmanage network management, vsmart controller +9 more +11 moreA vulnerability in the configuration and management database of the Cisco SD-WAN Solution could...8.8 High
- lilypondlilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program...9.8 Critical
- atlassian crucible, fisheye, fisheye and crucible +2 moreAtlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to...9.0 Critical
- math.js, mathjs project mathjs +1 moreArbitrary Code Execution in mathjs9.8 Critical
- elastic logstashLogstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will...7.5 High
- php phpmailer, joomla joomla\!, wordpress +2 moreRemote code execution in PHPMailer9.8 Critical
- oracle solaris, sun sunos +1 moreArgument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5...10.0 High
- hilgraeve hyperaccessArgument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to...6.8 Medium
- microsoft windows xp, windows server 2003 +1 moreArgument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft...5.1 Medium
- winscpArgument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or...7.1 High
- skypeArgument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*...2.6 Low
- avantbrowser avant browserArgument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote...5.0 Medium
- mozilla firefoxArgument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers...5.0 Medium
- microsoft internet explorerArgument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted...5.0 Medium
- microsoft outlookArgument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote...5.0 Medium
- beagle project beagleArgument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary...7.5 High
- kimihia tellmeArgument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify...6.4 Medium
- Show moreLoading…