CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Description
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-108 · CAPEC-15 · CAPEC-43 · CAPEC-6 · CAPEC-88
CVEs mapped to this weakness (2,016)
page 92 of 101| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-7625 | — | 0.00 | — | 0.01 | Apr 2, 2020 | op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function. | ||
| CVE-2020-7624 | — | 0.00 | — | 0.01 | Apr 2, 2020 | effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument. | ||
| CVE-2020-7623 | — | 0.00 | — | 0.02 | Apr 2, 2020 | jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument. | ||
| CVE-2020-7621 | — | 0.00 | — | 0.02 | Apr 2, 2020 | strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function. | ||
| CVE-2020-7619 | — | 0.00 | — | 0.02 | Apr 2, 2020 | get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data. | ||
| CVE-2020-7620 | — | 0.00 | — | 0.02 | Apr 2, 2020 | pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params. | ||
| CVE-2020-7603 | 0.00 | — | 0.00 | Mar 15, 2020 | closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization. | |||
| CVE-2020-7607 | — | 0.00 | — | 0.00 | Mar 15, 2020 | gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization. | ||
| CVE-2020-7605 | — | 0.00 | — | 0.00 | Mar 15, 2020 | gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options. | ||
| CVE-2020-7606 | — | 0.00 | — | 0.00 | Mar 15, 2020 | docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization. | ||
| CVE-2020-7604 | 0.00 | — | 0.00 | Mar 15, 2020 | pulverizr through 0.7.0 allows execution of arbitrary commands. Within "lib/job.js", the variable "filename" can be controlled by the attacker. This function uses the variable "filename" to construct the argument of the exec call without any sanitization. In order to… | |||
| CVE-2020-7602 | 0.00 | — | 0.00 | Mar 15, 2020 | node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the… | |||
| CVE-2020-7601 | — | 0.00 | — | 0.01 | Mar 15, 2020 | gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options. | ||
| CVE-2019-10807 | — | 0.00 | — | 0.01 | Mar 10, 2020 | Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer. | ||
| CVE-2020-10235 | — | 0.00 | — | 0.01 | Mar 9, 2020 | An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDatabase in… | ||
| CVE-2020-2159 | 0.00 | — | 0.05 | Mar 9, 2020 | Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins. | |||
| CVE-2020-1734 | 0.00 | — | 0.00 | Mar 3, 2020 | A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run… | |||
| CVE-2019-10801 | — | 0.00 | — | 0.01 | Feb 28, 2020 | enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization. | ||
| CVE-2019-10802 | 0.00 | — | 0.01 | Feb 28, 2020 | giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation. | |||
| CVE-2019-10803 | — | 0.00 | — | 0.01 | Feb 28, 2020 | push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands. |
- CVE-2020-7625Apr 2, 2020risk 0.00cvss —epss 0.01
op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.
- CVE-2020-7624Apr 2, 2020risk 0.00cvss —epss 0.01
effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.
- CVE-2020-7623Apr 2, 2020risk 0.00cvss —epss 0.02
jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.
- CVE-2020-7621Apr 2, 2020risk 0.00cvss —epss 0.02
strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.
- CVE-2020-7619Apr 2, 2020risk 0.00cvss —epss 0.02
get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.
- CVE-2020-7620Apr 2, 2020risk 0.00cvss —epss 0.02
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
- CVE-2020-7603Mar 15, 2020risk 0.00cvss —epss 0.00
closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization.
- CVE-2020-7607Mar 15, 2020risk 0.00cvss —epss 0.00
gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization.
- CVE-2020-7605Mar 15, 2020risk 0.00cvss —epss 0.00
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options.
- CVE-2020-7606Mar 15, 2020risk 0.00cvss —epss 0.00
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization.
- CVE-2020-7604Mar 15, 2020risk 0.00cvss —epss 0.00
pulverizr through 0.7.0 allows execution of arbitrary commands. Within "lib/job.js", the variable "filename" can be controlled by the attacker. This function uses the variable "filename" to construct the argument of the exec call without any sanitization. In order to…
- CVE-2020-7602Mar 15, 2020risk 0.00cvss —epss 0.00
node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the…
- CVE-2020-7601Mar 15, 2020risk 0.00cvss —epss 0.01
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options.
- CVE-2019-10807Mar 10, 2020risk 0.00cvss —epss 0.01
Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.
- CVE-2020-10235Mar 9, 2020risk 0.00cvss —epss 0.01
An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDatabase in…
- CVE-2020-2159Mar 9, 2020risk 0.00cvss —epss 0.05
Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins.
- CVE-2020-1734Mar 3, 2020risk 0.00cvss —epss 0.00
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run…
- CVE-2019-10801Feb 28, 2020risk 0.00cvss —epss 0.01
enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization.
- CVE-2019-10802Feb 28, 2020risk 0.00cvss —epss 0.01
giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.
- CVE-2019-10803Feb 28, 2020risk 0.00cvss —epss 0.01
push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.