Vulnerabilities > Improper Neutralization of Special Elements used in a Command ('Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2023-05-27 CVE-2023-26129 Command Injection vulnerability in Bwm-Ng Project Bwm-Ng
All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file.
local
low complexity
bwm-ng-project CWE-77
7.8
2023-05-24 CVE-2023-31460 Command Injection vulnerability in Mitel Mivoice Connect
A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allow an authenticated attacker with internal network access to conduct a command injection attack due to insufficient restriction on URL parameters.
network
low complexity
mitel CWE-77
7.2
2023-05-24 CVE-2023-2868 Command Injection vulnerability in Barracuda products
A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006.
network
low complexity
barracuda CWE-77
critical
9.8
2023-05-23 CVE-2023-31740 Command Injection vulnerability in Linksys E2000 Firmware 1.0.06
There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06.
network
low complexity
linksys CWE-77
7.2
2023-05-23 CVE-2023-31741 Command Injection vulnerability in Linksys E2000 Firmware 1.0.06
There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06.
network
low complexity
linksys CWE-77
7.2
2023-05-23 CVE-2023-31996 Command Injection vulnerability in Hanwhavision products
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.
network
low complexity
hanwhavision CWE-77
8.8
2023-05-22 CVE-2023-31742 Command Injection vulnerability in Linksys Wrt54Gl Firmware 4.30.18.006
There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006.
network
low complexity
linksys CWE-77
7.2
2023-05-22 CVE-2023-33294 Command Injection vulnerability in Kaiostech Kaios 3.0/3.1
An issue was discovered in KaiOS 3.0 before 3.1.
network
low complexity
kaiostech CWE-77
critical
9.8
2023-05-22 CVE-2023-33235 Command Injection vulnerability in Moxa Mxsecurity 1.0
MXsecurity version 1.0 is vulnearble to command injection vulnerability.
network
low complexity
moxa CWE-77
8.8
2023-05-18 CVE-2023-31729 Command Injection vulnerability in Totolink A3300R Firmware 17.0.0Cu.557
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.
network
low complexity
totolink CWE-77
critical
9.8