Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-05 | CVE-2023-30013 | OS Command Injection vulnerability in Totolink X5000R Firmware 9.1.0U.6118B20201102/9.1.0U.6369B20230113 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. | 9.8 |
| 2023-05-04 | CVE-2023-2522 | OS Command Injection vulnerability in Feiyuxing Vec40G Firmware 3.0 A vulnerability was found in Chengdu VEC40G 3.0. | 7.2 |
| 2023-05-03 | CVE-2023-27999 | OS Command Injection vulnerability in Fortinet Fortiadc An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands. | 7.8 |
| 2023-05-03 | CVE-2023-25826 | OS Command Injection vulnerability in Opentsdb Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. | 9.8 |
| 2023-05-03 | CVE-2023-28742 | OS Command Injection vulnerability in F5 Big-Ip Domain Name System When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | 8.8 |
| 2023-05-02 | CVE-2023-29778 | OS Command Injection vulnerability in Gl-Inet Gl-Mt3000 Firmware 4.1.0 GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread. | 9.8 |
| 2023-05-02 | CVE-2023-2479 | OS Command Injection vulnerability in Appium Appium-Desktop OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4. | 9.8 |
| 2023-05-01 | CVE-2023-22919 | OS Command Injection vulnerability in Zyxel Nbg6604 Firmware 1.01(Abir.0)C0 The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request. | 8.8 |
| 2023-04-28 | CVE-2023-30854 | OS Command Injection vulnerability in Wwbn Avideo AVideo is an open source video platform. | 8.8 |
| 2023-04-28 | CVE-2023-28528 | OS Command Injection vulnerability in IBM AIX and Vios IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. | 7.8 |