Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-08-16 | CVE-2021-21599 | OS Command Injection vulnerability in Dell EMC Powerscale Onefs Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. | 6.7 |
| 2021-08-16 | CVE-2021-32826 | OS Command Injection vulnerability in Proxyee-Down Project Proxyee-Down Proxyee-Down is open source proxy software. | 8.1 |
| 2021-08-16 | CVE-2021-37708 | OS Command Injection vulnerability in Shopware Shopware is an open source eCommerce platform. | 9.8 |
| 2021-08-16 | CVE-2021-23422 | OS Command Injection vulnerability in Bikeshed Project Bikeshed This affects the package bikeshed before 3.0.0. | 7.8 |
| 2021-08-16 | CVE-2021-3708 | OS Command Injection vulnerability in Dlink Dsl-2750U Firmware 1.11 D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. | 7.8 |
| 2021-08-13 | CVE-2021-36380 | OS Command Injection vulnerability in Sunhillo Sureline Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi. | 9.8 |
| 2021-08-13 | CVE-2021-37028 | OS Command Injection vulnerability in Huawei Hg8045Q Firmware V300R016C00Spc110/V300R018C10 There is a command injection vulnerability in the HG8045Q product. | 6.7 |
| 2021-08-13 | CVE-2021-37344 | OS Command Injection vulnerability in Nagios XI Switch Wizard Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection). | 9.8 |
| 2021-08-13 | CVE-2021-37346 | OS Command Injection vulnerability in Nagios XI Watchguard Wizard Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command (OS Command injection). | 9.8 |
| 2021-08-12 | CVE-2021-31698 | OS Command Injection vulnerability in Quectel Eg25-G Firmware Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon. | 9.8 |