Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2018-11-15 CVE-2018-0694 OS Command Injection vulnerability in Soliton Filezen
FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
network
low complexity
soliton CWE-78
critical
9.8
2018-11-14 CVE-2018-15711 OS Command Injection vulnerability in Nagios XI 5.5.6
Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users.
network
low complexity
nagios CWE-78
8.8
2018-11-14 CVE-2018-15710 OS Command Injection vulnerability in Nagios XI 5.5.6
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
local
low complexity
nagios CWE-78
7.8
2018-11-14 CVE-2018-15709 OS Command Injection vulnerability in Nagios XI 5.5.6
Nagios XI 5.5.6 allows remote authenticated attackers to execute arbitrary commands via a crafted HTTP request.
network
low complexity
nagios CWE-78
8.8
2018-11-11 CVE-2018-19168 OS Command Injection vulnerability in Fruitywifi Project Fruitywifi
Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to execute arbitrary code with root privileges via a crafted mod_name parameter in a POST request.
network
low complexity
fruitywifi-project CWE-78
critical
9.8
2018-11-07 CVE-2018-19081 OS Command Injection vulnerability in multiple products
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
network
low complexity
opticam foscam CWE-78
critical
9.8
2018-11-07 CVE-2018-19073 OS Command Injection vulnerability in multiple products
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
network
low complexity
opticam foscam CWE-78
7.2
2018-11-07 CVE-2018-19070 OS Command Injection vulnerability in multiple products
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128.
network
low complexity
opticam foscam CWE-78
7.2
2018-11-02 CVE-2018-3890 OS Command Injection vulnerability in Yitechnology YI Home Camera Firmware 1.8.7.0D
An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D.
low complexity
yitechnology CWE-78
6.8
2018-11-01 CVE-2018-10587 OS Command Injection vulnerability in Netgain-Systems Enterprise Manager
NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57.
network
low complexity
netgain-systems CWE-78
7.2