Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2022-09-06 CVE-2022-34883 OS Command Injection vulnerability in Hitachi Raid Manager Storage Replication Adapter
OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands.
network
low complexity
hitachi CWE-78
8.8
2022-09-05 CVE-2021-28398 OS Command Injection vulnerability in Osgeo Geonetwork
A privileged attacker in GeoNetwork before 3.12.0 and 4.x before 4.0.4 can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure.
network
low complexity
osgeo CWE-78
7.2
2022-09-05 CVE-2022-31814 OS Command Injection vulnerability in Netgate Pfblockerng 2.1.426
pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header.
network
low complexity
netgate CWE-78
critical
9.8
2022-08-31 CVE-2022-37123 OS Command Injection vulnerability in Dlink Dir-816 Firmware 1.10Cnb04
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.
network
low complexity
dlink CWE-78
8.8
2022-08-31 CVE-2022-37129 OS Command Injection vulnerability in Dlink Dir-816 Firmware 1.10Cnb04
D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand.
network
low complexity
dlink CWE-78
8.8
2022-08-31 CVE-2022-37130 OS Command Injection vulnerability in Dlink Dir-816 Firmware 1.10Cnb04
In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability
network
low complexity
dlink CWE-78
critical
9.8
2022-08-31 CVE-2022-34383 OS Command Injection vulnerability in Dell Edge Gateway 5200 Firmware
Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability.
local
low complexity
dell CWE-78
8.2
2022-08-31 CVE-2022-36566 OS Command Injection vulnerability in Yogeshojha Rengine 1.3.0
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
network
low complexity
yogeshojha CWE-78
critical
9.8
2022-08-30 CVE-2022-36749 OS Command Injection vulnerability in Sourcefabric Rpi-Jukebox-Rfid 2.3.0
RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php.
network
low complexity
sourcefabric CWE-78
critical
9.8
2022-08-30 CVE-2022-31232 OS Command Injection vulnerability in Dell Smartfabric Storage Software 1.0.0
SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability.
network
low complexity
dell CWE-78
critical
9.8