Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-01-14 | CVE-2024-48890 | OS Command Injection vulnerability in Fortinet Fortisoar Imap Connector 3.5.6/3.5.7 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook | 8.8 |
| 2025-01-14 | CVE-2024-50566 | OS Command Injection vulnerability in Fortinet Fortimanager and Fortimanager Cloud A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager versions 7.6.0 through 7.6.1, versions 7.4.5 through 7.4.0, and versions 7.2.1 through 7.2.8, FortiManager Cloud versions 7.6.0 through 7.6.1, versions 7.4.0 through 7.4.4, and versions 7.2.2 through 7.2.7 may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests. | 8.8 |
| 2025-01-14 | CVE-2024-56497 | OS Command Injection vulnerability in Fortinet Fortimail and Fortirecorder An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0.0 and 6.4.0 through 6.4.4 allows attacker to execute unauthorized code or commands via the CLI. | 6.7 |
| 2025-01-08 | CVE-2024-50603 | OS Command Injection vulnerability in Aviatrix Controller An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. | 9.8 |
| 2025-01-06 | CVE-2024-12970 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection.This issue affects Pardus OS My Computer: before 0.7.2. low complexity CWE-78 | 3.9 |
| 2024-12-30 | CVE-2024-54181 | IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. | 7.2 |
| 2024-12-20 | CVE-2024-28767 | IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. low complexity CWE-78 | 6.8 |
| 2024-12-20 | CVE-2024-12829 | OS Command Injection vulnerability in Arista NG Firewall 17.1.1 Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. | 8.8 |
| 2024-12-19 | CVE-2021-26115 | OS Command Injection vulnerability in Fortinet Fortiwan An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command. | 7.8 |
| 2024-12-18 | CVE-2024-12686 | OS Command Injection vulnerability in Beyondtrust Remote Support A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user. | 7.2 |