Lucene search
+L

11443 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:50 p.m.•24 views

CVE-2014-4982

LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server...

9.8CVSS7.7AI score0.04571EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•16 views

CVE-2023-43206

D-LINK DWL-6610 FWv4.3.0.8B003C was discovered to contain a command injection vulnerability in the function webcertdownloadhandler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter...

9.8CVSS8.7AI score0.02722EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•17 views

CVE-2023-31856

A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594B20200910 allows attackers to execute arbitrary commands via a crafted http packet...

9.8CVSS8.2AI score0.02909EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:30 p.m.•18 views

CVE-2023-40158

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and...

8.8CVSS7AI score0.01281EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:11 p.m.•17 views

CVE-2018-18320

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote co...

9.8CVSS8.3AI score0.05244EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:58 a.m.•15 views

CVE-2018-19025

In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc...

10CVSS6.8AI score0.01507EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:56 a.m.•14 views

CVE-2018-4061

An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can inject arbitrary commands, resulting in arbitrary command execution. An attacker can send an authenticated HTTP reque...

9CVSS7.2AI score0.19488EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:29 a.m.•20 views

CVE-2021-27710

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system...

10CVSS8.4AI score0.07905EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:27 a.m.•20 views

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

9.8CVSS7AI score0.04024EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:27 a.m.•20 views

CVE-2021-33731

A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...

7.2CVSS7.1AI score0.46587EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:19 a.m.•12 views

CVE-2021-22801

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software All Versions...

9.8CVSS7.2AI score0.01557EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:57 a.m.•12 views

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

9.8CVSS9.5AI score0.01285EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:54 a.m.•14 views

CVE-2022-23329

A vulnerability in $"freemarker.template.utility.Execute"?new of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files...

9.8CVSS7.8AI score0.1441EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:53 a.m.•19 views

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

8.8CVSS7.6AI score0.00907EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:43 a.m.•20 views

CVE-2022-26212

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceM...

9.8CVSS8.6AI score0.02779EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:43 a.m.•13 views

CVE-2022-26999

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wanipstat, wanmaskstat, wangwstat, and wandns1stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS8.6AI score0.0342EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:41 a.m.•14 views

CVE-2022-26211

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the...

9.8CVSS8.6AI score0.02779EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:41 a.m.•16 views

CVE-2022-26992

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands...

9.8CVSS8.6AI score0.02908EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:41 a.m.•18 views

CVE-2022-35555

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.94122, which allows attackers to construct cmdinput parameters for arbitrary command execution...

9.8CVSS7.5AI score0.25958EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:03 a.m.•15 views

CVE-2011-0703

In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...

9.8CVSS7.3AI score0.01267EPSS
SaveExploits0References1
Rows per page
Query Builder