Vulnerability index

Browse CVEs

6,375 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness OS Command InjectionCWE-78 × clear
A830r Firmware CRITICAL 9.8
CVE-2025-28035

TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through th…

No fix yet
Fix from $2,300 2025-04-22
A950rg Firmware CRITICAL 9.8
CVE-2025-28036

TOTOLINK A950RG V4.1.2cu.5161_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through t…

No fix yet
Fix from $2,300 2025-04-22
Ex1200t Firmware CRITICAL 9.8
CVE-2025-28038

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through…

No fix yet
Fix from $2,300 2025-04-22
Ex1200t Firmware CRITICAL 9.8
CVE-2025-28039

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through …

No fix yet
Fix from $2,300 2025-04-22
A810r Firmware CRITICAL 9.8
CVE-2025-28037

TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in …

No fix yet
Fix from $2,300 2025-04-22
A800r Firmware CRITICAL 9.8
CVE-2025-28034

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5…

No fix yet
Fix from $2,300 2025-04-22
Mailman HIGH 8.1
CVE-2025-43920

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrar…

Fix: after 2.1.39
Fix from $1,950 2025-04-20
Cicadascms HIGH 7.2
CVE-2025-3816EPSS 6%

A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/schedule/save…

No fix yet
Fix from $1,950 2025-04-19
Dir 823x Firmware CRITICAL 9.8
CVE-2025-29042

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c

No fix yet
Fix from $2,300 2025-04-17
Dir 823x Firmware CRITICAL 9.8
CVE-2025-29043

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234

No fix yet
Fix from $2,300 2025-04-17
Dir 823x Firmware CRITICAL 9.8
CVE-2025-29040

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41737c

No fix yet
Fix from $2,300 2025-04-17
Dir 823x Firmware CRITICAL 9.8
CVE-2025-29041

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c

No fix yet
Fix from $2,300 2025-04-17
Web Based Pharmacy Product Management System CRITICAL 9.8
CVE-2025-3729

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affe…

No fix yet
Fix from $2,300 2025-04-16
Unclassified CRITICAL 9.3
CVE-2025-32778EPSS 19%

Web-Check is an all-in-one OSINT tool for analyzing any website. A command injection vulnerability exists in the screenshot API of the Web Check proj…

Patch available
Fix from $2,300 2025-04-15
A810r Firmware CRITICAL 9.8
CVE-2025-28137EPSS 14%

The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function throu…

No fix yet
Fix from $2,300 2025-04-15
Unclassified MEDIUM 6.3
CVE-2025-0119

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with …

Mitigation only
Fix from $1,600 2025-04-11
Unclassified HIGH 8.0
CVE-2025-32107

OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123". If this vulnerabil…

Mitigation only
Fix from $1,950 2025-04-11
Unclassified HIGH 7.1
CVE-2025-0127

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run…

Mitigation only
Fix from $1,950 2025-04-11
Unclassified HIGH 8.8
CVE-2025-25053

OS command injection vulnerability in the WEB UI (the setting page) exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS comma…

Mitigation only
Fix from $1,950 2025-04-09
Unclassified CRITICAL 9.8
CVE-2025-27797

OS command injection vulnerability in the specific service exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be…

Mitigation only
Fix from $2,300 2025-04-09
Coldfusion HIGH 8.4
CVE-2025-30286

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co…

Mitigation only
Fix from $1,950 2025-04-08
Coldfusion HIGH 8.2
CVE-2025-30289EPSS 5%

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co…

Mitigation only
Fix from $1,950 2025-04-08
Unclassified MEDIUM 6.5
CVE-2025-27078

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying…

Mitigation only
Fix from $1,600 2025-04-08
Unclassified MEDIUM 6.0
CVE-2025-27079

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacke…

Mitigation only
Fix from $1,600 2025-04-08
Fortiisolator HIGH 7.2
CVE-2024-54024

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before…

Fix: 2.4.7+
Fix from $1,950 2025-04-08
Fortiisolator MEDIUM 6.7
CVE-2024-54025

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI be…

Fix: 2.4.7+
Fix from $1,600 2025-04-08
7kt Pac1260 Data Manager Firmware HIGH 7.2
CVE-2024-41789

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the l…

Mitigation only
Fix from $1,950 2025-04-08
7kt Pac1260 Data Manager Firmware HIGH 7.2
CVE-2024-41790

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the r…

Mitigation only
Fix from $1,950 2025-04-08
7kt Pac1260 Data Manager Firmware HIGH 7.2
CVE-2024-41788

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the i…

Mitigation only
Fix from $1,950 2025-04-08
Unclassified CRITICAL 9.8
CVE-2025-3363

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS c…

Mitigation only
Fix from $2,300 2025-04-08