Browse CVEs

HIGH 8.8 CVE-2023-24837 HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege… Powerstation Firmware Mitigation only Fix from $1,9502023-03-27 CRITICAL 9.8 CVE-2018-25083 The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name. Pull It 1.4.0+ Fix from $2,3002023-03-27 CRITICAL 9.8 CVE-2022-28495 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWl… Cp900 Firmware No fix yet Fix from $2,3002023-03-24 MEDIUM 5.5 CVE-2023-20056 A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (… Wireless Lan Controller Software 8.10.183.0 / 16.12.8+ Fix from $1,6002023-03-23 MEDIUM 6.8 CVE-2023-20082 A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privilege… Ios Xe 17.3.7 / 17.6.5+ Fix from $1,6002023-03-23 CRITICAL 9.8 CVE-2022-28491 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter… Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28494 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filena… Cp900 Firmware No fix yet Fix from $2,3002023-03-23 HIGH 8.8 CVE-2022-37337 A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request … Rbs750 Firmware No fix yet Fix from $1,9502023-03-21 HIGH 7.8 CVE-2023-28617 org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or dire… Org Mode after 9.6.1 Fix from $1,9502023-03-19 CRITICAL 9.8 CVE-2023-25280 KEVEPSS 98% OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_a… Dir 820l Firmware Mitigation only Fix from $2,3002023-03-16 HIGH 7.8 CVE-2023-24229EPSS 7% DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands v… Vigor2960 Firmware No fix yet Fix from $1,9502023-03-15 CRITICAL 9.8 CVE-2023-28343EPSS 85% OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone param… Energy Communication Unit Firmware No fix yet Fix from $2,3002023-03-14 HIGH 8.8 CVE-2023-25617 SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution … Business Objects Business Intelligence Platform Mitigation only Fix from $1,9502023-03-14 CRITICAL 9.8 CVE-2023-25279EPSS 31% OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. Dir 820l Firmware No fix yet Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-24762 OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress pa… Dir 867 Firmware Mitigation only Fix from $2,3002023-03-13 CRITICAL 9.8 CVE-2023-1350 A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c o… Liferea 1.14.1+ Fix from $2,3002023-03-11 HIGH 7.8 CVE-2023-27985 emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack … Emacs after 28.2 Fix from $1,9502023-03-09 HIGH 7.8 CVE-2023-1277 A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function Insta… Kylin System Updater after 1.4.20kord Fix from $1,9502023-03-08 CRITICAL 9.8 CVE-2023-25395 TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticD… A7100ru Firmware No fix yet Fix from $2,3002023-03-08 HIGH 8.8 CVE-2022-39951 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiW… Fortiweb after 7.0.2 Fix from $1,9502023-03-07 HIGH 8.8 CVE-2023-26490 mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to … Mailcow\ 2023-03+ Fix from $1,9502023-03-04 HIGH 7.2 CVE-2023-26213EPSS 8% On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /aj… T100b Firmware No fix yet Fix from $1,9502023-03-03 MEDIUM 6.7 CVE-2023-20075 Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands. These vulnerab… Email Security Appliance 12.5.3-041 / 13.0.5-007+ Fix from $1,6002023-03-01 HIGH 8.8 CVE-2023-26759 Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component. Erp No fix yet Fix from $1,9502023-02-27 CRITICAL 9.8 CVE-2022-2024EPSS 98% OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11. Gogs 0.12.11+ Fix from $2,3002023-02-25 HIGH 8.8 CVE-2023-26039 ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior … Zoneminder 1.36.33 / 1.37.33+ Fix from $1,9502023-02-25 CRITICAL 9.8 CVE-2022-36231 pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3. Pdf Info Patch available Fix from $2,3002023-02-23 MEDIUM 6.7 CVE-2023-20015 A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series … Ucs Central Software 4.0 / 4.1+ Fix from $1,6002023-02-23 HIGH 7.8 CVE-2023-20050 A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying opera… Nx Os 8.2 / 9.3+ Fix from $1,9502023-02-23 CRITICAL 9.8 CVE-2023-0935 A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of … Dolphinphp after 1.5.1 Fix from $2,3002023-02-21