Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2024-03-24 CVE-2024-2854 OS Command Injection vulnerability in Tenda Ac18 Firmware 15.03.05.05
A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05.
network
low complexity
tenda CWE-78
critical
9.8
2024-03-24 CVE-2024-2853 OS Command Injection vulnerability in Tenda Ac10U Firmware 15.03.06.48/15.03.06.49
A vulnerability was found in Tenda AC10U 15.03.06.48/15.03.06.49.
network
low complexity
tenda CWE-78
critical
9.8
2024-03-24 CVE-2024-2851 OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.18/15.03.20Multi
A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi.
network
low complexity
tenda CWE-78
critical
9.8
2024-03-22 CVE-2024-2812 OS Command Injection vulnerability in Tenda Ac15 Firmware 15.03.05.18/15.03.05.20Multi
A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi.
network
low complexity
tenda CWE-78
8.8
2024-02-21 CVE-2024-1212 OS Command Injection vulnerability in Progress Loadmaster
Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.
network
low complexity
progress CWE-78
critical
9.8
2024-02-15 CVE-2024-20720 OS Command Injection vulnerability in Adobe Commerce 2.4.4/2.4.5/2.4.6
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker.
network
low complexity
adobe CWE-78
critical
9.1
2024-02-15 CVE-2024-26260 The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters.
network
low complexity
CWE-78
critical
9.8
2024-02-14 CVE-2024-1367 OS Command Injection vulnerability in Tenable Security Center
A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host.
network
low complexity
tenable CWE-78
7.2
2024-02-13 CVE-2024-23812 OS Command Injection vulnerability in Siemens Sinec NMS 1.0/1.0.3/2.0
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).
network
low complexity
siemens CWE-78
8.8
2024-02-13 CVE-2024-22445 OS Command Injection vulnerability in Dell Powerprotect Data Manager
Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability.
network
low complexity
dell CWE-78
7.2