Vulnerabilities > Improper Neutralization of Special Elements used in a Command ('Command Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-25 | CVE-2023-51833 | Command Injection vulnerability in Trendnet Tew-411Brpplus Firmware 2.07Eu A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page. | 8.1 |
| 2024-01-25 | CVE-2023-7227 | Command Injection vulnerability in Systemk-Corp products SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system (DDNS) settings that could allow an attacker to execute arbitrary commands with root privileges. | 9.8 |
| 2024-01-25 | CVE-2024-22529 | Command Injection vulnerability in Totolink X2000R Firmware 2.0.0B20230727.10434 TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa. | 9.8 |
| 2024-01-25 | CVE-2024-22729 | Command Injection vulnerability in Netis-Systems Mw5360 Firmware 1.0.1.3031 NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page. | 9.8 |
| 2024-01-24 | CVE-2023-52038 | Command Injection vulnerability in Totolink X6000R Firmware 9.4.0Cu.852B20230719 An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function. | 9.8 |
| 2024-01-24 | CVE-2023-52039 | Command Injection vulnerability in Totolink X6000R Firmware 9.4.0Cu.852B20230719 An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function. | 9.8 |
| 2024-01-24 | CVE-2023-52040 | Command Injection vulnerability in Totolink X6000R Firmware 9.4.0Cu.852B20230719 An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function. | 9.8 |
| 2024-01-24 | CVE-2023-51887 | Command Injection vulnerability in Ctan Mathtex Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL. | 9.8 |
| 2024-01-24 | CVE-2024-22651 | Command Injection vulnerability in Dlink Dir-815 Firmware 1.0.1/1.01Ssb08.Bin/1.04 There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04. | 9.8 |
| 2024-01-23 | CVE-2023-50274 | Command Injection vulnerability in HP Oneview HPE OneView may allow command injection with local privilege escalation. | 7.8 |