Vulnerability index

Browse CVEs

6,375 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness OS Command InjectionCWE-78 × clear
Unclassified CRITICAL 9.8
CVE-2025-3361

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS c…

Mitigation only
Fix from $2,300 2025-04-08
Unclassified CRITICAL 9.8
CVE-2025-3362

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS c…

Mitigation only
Fix from $2,300 2025-04-08
Unclassified CRITICAL 10.0
CVE-2021-47667EPSS 33%

An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to exe…

Mitigation only
Fix from $2,300 2025-04-05
Unclassified HIGH 7.4
CVE-2025-30370

jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name tha…

Patch available
Fix from $1,950 2025-04-03
Password Secure CRITICAL 9.8
CVE-2025-26817

Netwrix Password Secure 9.2.0.32454 allows OS command injection.

Fix: 9.2.1+
Fix from $2,300 2025-04-03
Unclassified CRITICAL 9.2
CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP setti…

Mitigation only
Fix from $2,300 2025-04-02
Unclassified HIGH 8.6
CVE-2025-0676

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit impr…

Mitigation only
Fix from $1,950 2025-04-02
Unclassified MEDIUM 6.5
CVE-2025-26055

An OS Command Injection vulnerability exists in the Infinxt iEdge 100 2.1.32 Troubleshoot module, specifically in the tracertVal parameter of the Tra…

Mitigation only
Fix from $1,600 2025-04-01
Artificial Intelligence HIGH 7.5
CVE-2025-31692

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allow…

Fix: 1.0.5+
Fix from $1,950 2025-03-31
Artificial Intelligence MEDIUM 6.6
CVE-2025-31693

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allow…

Fix: 1.0.5+
Fix from $1,600 2025-03-31
Completepbx HIGH 8.8
CVE-2025-30004

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary …

Fix: 5.2.36.1+
Fix from $1,950 2025-03-31
Unclassified HIGH 7.3
CVE-2025-3002EPSS 19%

A vulnerability, which was classified as critical, has been found in Digital China DCME-520 up to 20250320. This issue affects some unknown processin…

Mitigation only
Fix from $1,950 2025-03-31
Unclassified CRITICAL 9.3
CVE-2025-3022

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via…

Mitigation only
Fix from $2,300 2025-03-31
Unclassified CRITICAL 10.0
CVE-2025-2071

A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary …

Mitigation only
Fix from $2,300 2025-03-31
Unclassified MEDIUM 5.5
CVE-2025-2983

A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. T…

Mitigation only
Fix from $1,600 2025-03-31
A3002r Firmware CRITICAL 9.8
CVE-2025-25579EPSS 10%

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

No fix yet
Fix from $2,300 2025-03-28
A3100r Firmware CRITICAL 9.8
CVE-2025-28256

An issue in TOTOLINK A3100R V4.1.2cu.5247_B20211129 allows a remote attacker to execute arbitrary code via the setWebWlanIdx of the file /lib/cste_mo…

No fix yet
Fix from $2,300 2025-03-28
Dc112a Firmware CRITICAL 9.8
CVE-2025-28219EPSS 12%

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands vi…

Mitigation only
Fix from $2,300 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-24385

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-24386

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-23383

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-24377

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-24378

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-24379

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2025-24380

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment CRITICAL 9.8
CVE-2024-49601

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $2,300 2025-03-28
Unity Operating Environment CRITICAL 9.8
CVE-2025-22398

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $2,300 2025-03-28
Unity Operating Environment HIGH 7.3
CVE-2025-24382

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28
Unity Operating Environment CRITICAL 9.1
CVE-2025-24383

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $2,300 2025-03-28
Unity Operating Environment HIGH 7.8
CVE-2024-49563

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner…

Fix: 5.5.0.0.5.259+
Fix from $1,950 2025-03-28