CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Description
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-136 · CAPEC-15 · CAPEC-183 · CAPEC-248 · CAPEC-40 · CAPEC-43 · CAPEC-75 · CAPEC-76
CVEs mapped to this weakness (3,970)
page 70 of 199| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-46421 | Cri | 0.57 | 9.8 | 0.03 | Dec 20, 2022 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0. | ||
| CVE-2022-45907 | Cri | 0.57 | 9.8 | 0.01 | Nov 26, 2022 | In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. | ||
| CVE-2022-45462 | Cri | 0.57 | 9.8 | 0.03 | Nov 23, 2022 | Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher | ||
| CVE-2022-45063 | Cri | 0.57 | 9.8 | 0.05 | Nov 10, 2022 | xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions. | ||
| CVE-2022-42161 | Hig | 0.57 | 8.8 | 0.03 | Oct 13, 2022 | D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS. | ||
| CVE-2022-42160 | Hig | 0.57 | 8.8 | 0.03 | Oct 13, 2022 | D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings. | ||
| CVE-2022-42156 | Hig | 0.57 | 8.8 | 0.03 | Oct 13, 2022 | D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at function SetNetworkTomographySettings. | ||
| CVE-2022-36633 | Hig | 0.57 | 8.8 | 0.50 | Aug 24, 2022 | Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a… | ||
| CVE-2022-20345 | Hig | 0.57 | 8.8 | 0.00 | Aug 10, 2022 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2020-28451 | Cri | 0.57 | 9.8 | 0.01 | Aug 2, 2022 | This affects the package image-tiler before 2.0.2. | ||
| CVE-2022-2323 | Hig | 0.57 | 8.8 | 0.06 | Jul 29, 2022 | Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions | ||
| CVE-2022-29558 | Hig | 0.57 | 8.8 | 0.01 | Jul 28, 2022 | Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface. | ||
| CVE-2020-28446 | Cri | 0.57 | 9.8 | 0.03 | Jul 25, 2022 | The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js. | ||
| CVE-2022-32262 | Hig | 0.57 | 8.8 | 0.03 | Jun 14, 2022 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution. | ||
| CVE-2019-9972 | Hig | 0.57 | 8.8 | 0.02 | Jun 7, 2022 | PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of " followed by " mishandling. | ||
| CVE-2022-29712 | Cri | 0.57 | 9.8 | 0.02 | Jun 2, 2022 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. | ||
| CVE-2022-26945 | Cri | 0.57 | 9.8 | 0.02 | May 25, 2022 | go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0. | ||
| CVE-2022-29599 | Cri | 0.57 | 9.8 | 0.04 | May 23, 2022 | In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks. | ||
| CVE-2022-24394 | Hig | 0.57 | 8.8 | 0.03 | May 17, 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to execute system… | ||
| CVE-2022-24393 | Hig | 0.57 | 8.8 | 0.03 | May 17, 2022 | Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP request to execute system… |
- risk 0.57cvss 9.8epss 0.03
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.
- risk 0.57cvss 9.8epss 0.01
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
- risk 0.57cvss 9.8epss 0.03
Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher
- risk 0.57cvss 9.8epss 0.05
xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.
- risk 0.57cvss 8.8epss 0.03
D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS.
- risk 0.57cvss 8.8epss 0.03
D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system_time_timezone parameter at function SetNTPServerSettings.
- risk 0.57cvss 8.8epss 0.03
D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at function SetNetworkTomographySettings.
- risk 0.57cvss 8.8epss 0.50
Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a…
- risk 0.57cvss 8.8epss 0.00
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.57cvss 9.8epss 0.01
This affects the package image-tiler before 2.0.2.
- risk 0.57cvss 8.8epss 0.06
Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions
- risk 0.57cvss 8.8epss 0.01
Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.
- risk 0.57cvss 9.8epss 0.03
The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js.
- risk 0.57cvss 8.8epss 0.03
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application contains a file upload server that is vulnerable to command injection. An attacker could use this to achieve arbitrary code execution.
- risk 0.57cvss 8.8epss 0.02
PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of " followed by " mishandling.
- risk 0.57cvss 9.8epss 0.02
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters.
- risk 0.57cvss 9.8epss 0.02
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.
- risk 0.57cvss 9.8epss 0.04
In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
- risk 0.57cvss 8.8epss 0.03
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to execute system…
- risk 0.57cvss 8.8epss 0.03
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP request to execute system…