Lucene search
+L

18741 matches found

NVD
NVD
•added 2025/09/10 4:15 p.m.•38 views

CVE-2025-43884

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command...

8.2CVSS0.00462EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/10 3:52 p.m.•7 views

CVE-2025-43885

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command...

7.8CVSS7.4AI score0.00526EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/10 3:47 p.m.•10 views

CVE-2025-43884

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command...

8.2CVSS7.7AI score0.00462EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/10 12:00 a.m.•18 views

PT-2025-81: OS command injection in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability is related to a failure to neutralize special elements used in operating system commands. Exploitation of this vulnerability allows a remote attacker t...

9.4CVSS6.1AI score
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/10 12:00 a.m.•16 views

CVE-2025-56413

OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /api/v2/hosts/ssh/operate endpoint...

6.6AI score0.01199EPSS
SaveExploits0References2
Mend
Mend
•added 2025/09/10 12:00 a.m.•10 views

CVE-2025-56413

OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /api/v2/hosts/ssh/operate endpoint...

8.8CVSS6.6AI score0.01199EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/10 12:00 a.m.•7 views

CVE-2025-43884: Improper Neutralization of Special Elements used in an OS Command

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command...

8.2CVSS7.8AI score0.00462EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/10 12:00 a.m.•8 views

CVE-2025-43885: Improper Neutralization of Special Elements used in an OS Command

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command...

7.8CVSS7.5AI score0.00526EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/10 12:00 a.m.•10 views

CVE-2025-56413: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /api/v2/hosts/ssh/operate endpoint...

8.8CVSS6.6AI score0.01199EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2023-45158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging not the default...

9.8CVSS8.5AI score0.04412EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/09 9:15 p.m.•59 views

CVE-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session...

5.8CVSS0.00524EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/09 9:15 p.m.•34 views

CVE-2025-54084

OS Command 'OS Command Injection' vulnerability in Calix GigaCenter ONT Quantenna SoC modules allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCente...

8.5CVSS0.00797EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/09 9:12 p.m.•13 views

CVE-2025-9997

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause command injection in BLMon that is executed in the operating system console when in a SSH session...

5.8CVSS6.7AI score0.0049EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/09 9:11 p.m.•51 views

CVE-2025-9996

CVE-2025-9996 describes an OS command injection in Schneider Electric’s BLMon Console used in Saitel DR/DP remote terminal units. The root cause is improper neutralization of special elements in an OS command, enabling execution of arbitrary shell commands when netstat is run in an SSH session. T...

5.8CVSS6.8AI score0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/09 9:11 p.m.•20 views

CVE-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session...

5.8CVSS6.8AI score0.00524EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/09 9:11 p.m.•67 views

CVE-2025-9996

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause the execution of any shell command when executing a netstat command using BLMon Console in an SSH session...

5.8CVSS0.00524EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/09/09 2:15 p.m.•18 views

CVE-2024-45325

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests...

6.7CVSS6.5AI score0.00464EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/09 1:50 p.m.•31 views

CVE-2024-45325

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests...

6.7CVSS0.00464EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/09 1:50 p.m.•7 views

CVE-2024-45325

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests...

6.7CVSS6.5AI score0.00464EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•10 views

CVE-2024-45325: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests...

6.7CVSS6.5AI score0.00464EPSS
SaveExploits0References1
Rows per page
Query Builder