Vulnerabilities > Improper Neutralization of Special Elements used in a Command ('Command Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-29 | CVE-2020-29547 | Command Injection vulnerability in Citadel Webcit 7.10/926 An issue was discovered in Citadel through webcit-926. | 5.9 |
| 2023-05-27 | CVE-2015-20108 | Command Injection vulnerability in Onelogin Ruby-Saml xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used. | 9.8 |
| 2023-05-27 | CVE-2023-26127 | Command Injection vulnerability in N158 Project N158 All versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. **Note:** To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. | 7.8 |
| 2023-05-27 | CVE-2023-26128 | Command Injection vulnerability in Keep-Module-Latest Project Keep-Module-Latest All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. **Note:** To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability to run Node.js code within the target environment. | 7.8 |
| 2023-05-27 | CVE-2023-26129 | Command Injection vulnerability in Bwm-Ng Project Bwm-Ng All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. | 7.8 |
| 2023-05-24 | CVE-2023-31460 | Command Injection vulnerability in Mitel Mivoice Connect A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters. | 7.2 |
| 2023-05-24 | CVE-2023-2868 | Command Injection vulnerability in Barracuda products A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. | 9.8 |
| 2023-05-23 | CVE-2023-31740 | Command Injection vulnerability in Linksys E2000 Firmware 1.0.06 There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. | 7.2 |
| 2023-05-23 | CVE-2023-31741 | Command Injection vulnerability in Linksys E2000 Firmware 1.0.06 There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. | 7.2 |
| 2023-05-23 | CVE-2023-31996 | Command Injection vulnerability in Hanwhavision products Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function. | 8.8 |