Vulnerabilities > Improper Neutralization of Special Elements used in a Command ('Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2023-02-12 CVE-2023-0789 Command Injection vulnerability in PHPmyfaq
Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
network
low complexity
phpmyfaq CWE-77
critical
 9.8
9.8
2023-02-11 CVE-2023-0127 Command Injection vulnerability in Dlink Dwl-2600Ap Firmware 4.2.0.17
A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root.
local
low complexity
dlink CWE-77
7.8
7.8
2023-02-11 CVE-2023-0776 Command Injection vulnerability in Baicells products
Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections.
network
low complexity
baicells CWE-77
critical
 10.0
10
2023-02-09 CVE-2022-43550 Command Injection vulnerability in Jitsi 2.10.5550/2.5.5061/2.9.5544
A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution.
network
low complexity
jitsi CWE-77
critical
 9.8
9.8
2023-02-06 CVE-2021-31573 Command Injection vulnerability in Mediatek En7528 Firmware and En7580 Firmware
In Config Manager, there is a possible command injection due to improper input validation.
network
low complexity
mediatek CWE-77
critical
 9.8
9.8
2023-02-06 CVE-2021-31574 Command Injection vulnerability in Mediatek En7528 Firmware and En7580 Firmware
In Config Manager, there is a possible command injection due to improper input validation.
network
low complexity
mediatek CWE-77
critical
 9.8
9.8
2023-02-06 CVE-2021-31575 Command Injection vulnerability in Mediatek En7528 Firmware and En7580 Firmware
In Config Manager, there is a possible command injection due to improper input validation.
network
low complexity
mediatek CWE-77
critical
 9.8
9.8
2023-02-06 CVE-2023-23333 Command Injection vulnerability in Contec Solarview Compact Firmware 4.0/5.0/6.0
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
network
low complexity
contec CWE-77
critical
 9.8
9.8
2023-02-06 CVE-2023-24276 Command Injection vulnerability in Totolink A7100Ru Firmware 7.4Cu.2313B20191024
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
network
low complexity
totolink CWE-77
critical
 9.8
9.8
2023-02-03 CVE-2023-24138 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function.
network
low complexity
totolink CWE-77
critical
 9.8
9.8