Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2023-08-27 CVE-2022-43907 OS Command Injection vulnerability in IBM Security Guardium 11.4
IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
network
low complexity
ibm CWE-78
8.8
2023-08-25 CVE-2023-4542 OS Command Injection vulnerability in Dlink Dar-8000-10 Firmware
A vulnerability was found in D-Link DAR-8000-10 up to 20230809.
network
low complexity
dlink CWE-78
critical
9.8
2023-08-23 CVE-2023-40144 OS Command Injection vulnerability in CBC products
OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings.
network
low complexity
cbc CWE-78
8.8
2023-08-18 CVE-2023-4412 OS Command Injection vulnerability in Totolink Ex1200L Firmware 9.3.5U.6146B20201023
A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical.
network
low complexity
totolink CWE-78
critical
9.8
2023-08-18 CVE-2023-4410 OS Command Injection vulnerability in Totolink Ex1200L Firmware 9.3.5U.6146B20201023
A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023.
network
low complexity
totolink CWE-78
critical
9.8
2023-08-18 CVE-2023-4411 OS Command Injection vulnerability in Totolink Ex1200L Firmware 9.3.5U.6146B20201023
A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical.
network
low complexity
totolink CWE-78
critical
9.8
2023-08-18 CVE-2023-39416 OS Command Injection vulnerability in Northgrid Proself 1.07/1.62/5.61
Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.
network
low complexity
northgrid CWE-78
7.2
2023-08-18 CVE-2023-39455 OS Command Injection vulnerability in Elecom products
OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.
network
low complexity
elecom CWE-78
8.8
2023-08-18 CVE-2023-39944 OS Command Injection vulnerability in Elecom Wrc-1750Ghbk Firmware and Wrc-F1167Acf Firmware
OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request.
network
low complexity
elecom CWE-78
8.8
2023-08-18 CVE-2023-40069 OS Command Injection vulnerability in Elecom products
OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request.
network
low complexity
elecom CWE-78
critical
9.8