CWE-88: Argument Injection
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
Also known as Improper Neutralization of Argument Delimiters in a Command.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- blamer project blamerblamer vulnerable to Arbitrary Argument Injection via the blameByFile() API6.5 Medium
- mitel mivoice connectA vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6...5.5 Medium
- mitel mivoice connectA vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24...5.5 Medium
- cisco thousandeyes enterprise agent, thousandeyes recorder application +1 moreA vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation...7.8 High
- oppo coloros, find x3 +1 moreCommand Injection In OPPO Service7.4 High
- connectedio connected ioConnected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message...9.8 Critical
- connectedio connected ioConnected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command...9.8 Critical
- zmanda amandaamanda: Fix of 2 CVEs7.8 High
- apache software foundation airflow odbc provider, apache apache-airflow-providers-odbc +1 moreApache Airflow ODBC Provider: Remote code execution vulnerability7.8 High
- go toolchain cmd/go, golang go, fedoraproject fedora +1 more +3 moreImproper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go9.8 Critical
- chshcms mccmsAn issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via...6.5 Medium
- coredial sipxcomCoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument...8.8 High
- apache openofficeApache OpenOffice: Macro URL arbitrary script execution7.8 High
- fortinet fortinacA improper neutralization of argument delimiters in a command ('argument injection') in Fortinet...7.2 High
- zmanda amandaA privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root...6.7 Medium
- suse rancher, wrangler +1 more[RANCHER] OS command injection in Rancher and Fleet7.5 High
- suse rancherRancher: Command injection in Git package7.6 High
- froxlor, froxlor froxlor/froxlor +1 moreArgument Injection in froxlor/froxlor5.3 Medium
- ayacms project ayacmsAyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php9.8 Critical
- mozilla firefoxMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team...8.8 High
- siemens simatic wincc oa v3.15, simatic wincc oa v3.16, simatic wincc oa v3.17 +2 more +4 moreA vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions), SIMATIC WinCC OA V3...5.4 Medium
phpxmlrpc/phpxmlrpcPackagistphpxmlrpc vulnerable to argument injectionNo score- github enterprise serverImproper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution8.8 High
- xfce xfce4-settings, debian linux, fedoraproject fedora +2 moreIn Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection...9.8 Critical
- vestacp control panel, vesta control panel +1 moremyVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable...7.2 High
- giteaGitea vulnerable to Argument Injection9.8 Critical
- libreoffice, debian linux, fedoraproject fedora +2 moreMacro URL arbitrary script execution6.3 Medium
- cisco sd-wan, catalyst sd-wan manager, sd-wan vmanage +2 more +4 moreCisco SD-WAN Software Arbitrary File Corruption Vulnerability6.7 Medium
- ahsay cloud backup suiteAhsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options....7.2 High
- python-poetry poetryPoetry Argument Injection vulnerability can lead to local Code Execution7.3 High
- atlassian bitbucket, bitbucket server, bitbucket server and data center +1 more +3 moreMultiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17,...8.8 High
- device42 cmdbRemote code execution in scheduled tasks component9.1 Critical
- mc-kill-port project mc-kill-portArbitrary Command Execution7.8 High
- huawei emui, harmonyos, magic ui +2 moreThe Settings application has an argument injection vulnerability. Successful exploitation of this...7.5 High
- apache hadoopCommand injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 build parameter injection was possible5.4 Medium
- codecov codecov-pythonCommand Injection6.5 Medium
- git-clone project git-cloneCommand Injection8.1 High
- ldap-account-manager ldap account manager, ldapaccountmanager lam, debian linux +2 moreUnauthenticated Remote Code Execution in ldap-account-manager9.0 Critical
- electrumpaymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment...5.5 Medium
- git-promise project git-promiseCommand Injection7.2 High
- dragonfly project dragonflyArbitrary file write in dragonfly9.1 Critical
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series...7.8 High
- kaidomc-pm-pl regionprotectArgument Injection in RegionProtect7.5 High
- gocdCommand Injection/Argument Injection in GoCD8.8 High
- microsoft workspace-toolsCommand Injection8.1 High
- insightsoftware magnitude simba amazon redshift jdbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- insightsoftware magnitude simba amazon athena jdbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- insightsoftware magnitude simba amazon redshift odbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- insightsoftware magnitude simba amazon athena odbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- Show moreLoading…