Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2022-08-31 CVE-2022-37123 OS Command Injection vulnerability in Dlink Dir-816 Firmware 1.10Cnb04
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.
network
low complexity
dlink CWE-78
8.8
2022-08-31 CVE-2022-37129 OS Command Injection vulnerability in Dlink Dir-816 Firmware 1.10Cnb04
D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand.
network
low complexity
dlink CWE-78
8.8
2022-08-31 CVE-2022-37130 OS Command Injection vulnerability in Dlink Dir-816 Firmware 1.10Cnb04
In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability
network
low complexity
dlink CWE-78
critical
9.8
2022-08-31 CVE-2022-34383 OS Command Injection vulnerability in Dell Edge Gateway 5200 Firmware
Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability.
local
low complexity
dell CWE-78
8.2
2022-08-31 CVE-2022-36566 OS Command Injection vulnerability in Yogeshojha Rengine 1.3.0
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
network
low complexity
yogeshojha CWE-78
critical
9.8
2022-08-30 CVE-2022-36749 OS Command Injection vulnerability in Sourcefabric Rpi-Jukebox-Rfid 2.3.0
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php.
network
low complexity
sourcefabric CWE-78
critical
9.8
2022-08-30 CVE-2022-31232 OS Command Injection vulnerability in Dell Smartfabric Storage Software 1.0.0
SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability.
network
low complexity
dell CWE-78
critical
9.8
2022-08-30 CVE-2022-34374 OS Command Injection vulnerability in Dell Container Storage Modules
Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries.
network
low complexity
dell CWE-78
8.8
2022-08-30 CVE-2022-37149 OS Command Injection vulnerability in Wavlink Wl-Wn575A3 Firmware Rpt75A3.V4300.201217
WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi.
network
low complexity
wavlink CWE-78
critical
9.8
2022-08-29 CVE-2022-38511 OS Command Injection vulnerability in Totolink A810R Firmware 5.9C.4050B20190424
TOTOLINK A810R V5.9c.4050_B20190424 was discovered to contain a command injection vulnerability via the component downloadFile.cgi.
local
low complexity
totolink CWE-78
7.8