Vulnerabilities > Improper Neutralization of Special Elements used in a Command ('Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2021-08-17 CVE-2020-15955 Command Injection vulnerability in Fehcom S/Qmail
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail.
network
high complexity
fehcom CWE-77
5.9
5.9
2021-08-17 CVE-2020-29548 Command Injection vulnerability in Smartertools Smartermail
An issue was discovered in SmarterTools SmarterMail through 100.0.7537.
network
high complexity
smartertools CWE-77
8.1
8.1
2021-08-17 CVE-2021-32830 Command Injection vulnerability in Haikuforteams Diez
The @diez/generation npm package is a client for Diez.
local
high complexity
haikuforteams CWE-77
7.0
7.0
2021-08-17 CVE-2021-3617 Command Injection vulnerability in Lenovo products
A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration.
network
low complexity
lenovo CWE-77
7.2
7.2
2021-08-16 CVE-2021-21595 Command Injection vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command.
local
low complexity
dell CWE-77
6.7
6.7
2021-08-16 CVE-2021-22935 Command Injection vulnerability in multiple products
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.
network
low complexity
pulsesecure ivanti CWE-77
7.2
7.2
2021-08-16 CVE-2021-22938 Command Injection vulnerability in multiple products
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console.
network
low complexity
pulsesecure ivanti CWE-77
7.2
7.2
2021-08-13 CVE-2020-18758 Command Injection vulnerability in Dcce Mac1100 PLC Firmware
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code.
network
low complexity
dcce CWE-77
critical
 9.8
9.8
2021-08-11 CVE-2021-38530 Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
network
low complexity
netgear CWE-77
critical
 9.8
9.8
2021-08-11 CVE-2021-38527 Command Injection vulnerability in Netgear products
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
network
low complexity
netgear CWE-77
critical
 9.8
9.8