Vulnerabilities > Improper Neutralization of Special Elements used in a Command ('Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2021-08-11 CVE-2021-38521 Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an authenticated user.
network
low complexity
netgear CWE-77
7.2
2021-08-10 CVE-2021-38370 Command Injection vulnerability in Alpine Project Alpine
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
network
high complexity
alpine-project CWE-77
5.9
2021-08-10 CVE-2021-38372 Command Injection vulnerability in KDE Trojita 0.7
In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.
network
high complexity
kde CWE-77
3.7
2021-08-08 CVE-2020-36448 Command Injection vulnerability in Cache Project Cache
An issue was discovered in the cache crate through 2020-11-24 for Rust.
network
high complexity
cache-project CWE-77
8.1
2021-08-08 CVE-2020-36449 Command Injection vulnerability in Kekbit Project Kekbit
An issue was discovered in the kekbit crate before 0.3.4 for Rust.
network
high complexity
kekbit-project CWE-77
8.1
2021-08-08 CVE-2020-36450 Command Injection vulnerability in Bunch Project Bunch
An issue was discovered in the bunch crate through 2020-11-12 for Rust.
network
high complexity
bunch-project CWE-77
8.1
2021-08-08 CVE-2020-36451 Command Injection vulnerability in RCU Cell Project RCU Cell
An issue was discovered in the rcu_cell crate through 2020-11-14 for Rust.
network
high complexity
rcu-cell-project CWE-77
8.1
2021-08-08 CVE-2020-36455 Command Injection vulnerability in Brokenlamp Slock
An issue was discovered in the slock crate through 2020-11-17 for Rust.
network
high complexity
brokenlamp CWE-77
8.1
2021-08-08 CVE-2020-36456 Command Injection vulnerability in Toolshed Project Toolshed
An issue was discovered in the toolshed crate through 2020-11-15 for Rust.
network
high complexity
toolshed-project CWE-77
8.1
2021-08-08 CVE-2020-36457 Command Injection vulnerability in Lever Project Lever 0.0.0/0.1.0/0.1.1
An issue was discovered in the lever crate before 0.1.1 for Rust.
network
high complexity
lever-project CWE-77
8.1