CVE-2022-36381: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2022-22555

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation ma...

CVE-2022-33923

Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may...

ROS-20220706-02

The Rubygem Rack web application development interface vulnerability is related to incorrect input validation when processing data transmitted through the Rack Lint middleware and CommonLogger middleware. Exploitation of the vulnerability could allow an attacker acting remotely to send specially...

CVE-2021-44080

A Command Injection vulnerability in httpd web server setup.cgi in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connectiontype parameter of the statussupportdiagnostictracing.json endpoint...

PT-2022-18115

Name of the Vulnerable Software and Affected Versions Dell EMC PowerStore versions 2.0.0.x through 2.1.0.x Description The issue is a command injection flaw that allows an authenticated attacker to execute arbitrary OS commands on the application's underlying OS with the privileges of the...

CVE-2021-44080

A Command Injection vulnerability in httpd web server setup.cgi in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS commands as root in the device via the connectiontype parameter of the statussupportdiagnostictracing.json endpoint...

CVE-2022-26532: Improper Neutralization of Argument Delimiters in a Command

A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, VPN series firmware versions 4.30 through 5.21, NSG series...

CVE-2022-29516

The web console of FUJITSU Network IPCOM series IPCOM EX2 IN3200, 3500, IPCOM EX2 LB1100, 3200, 3500, IPCOM EX2 SC1100, 3200, 3500, IPCOM EX2 NW1100, 3200, 3500, IPCOM EX2 DC, IPCOM EX2 DC, IPCOM EX IN2300, 2500, 2700, IPCOM EX LB1100, 1300, 2300, 2500, 2700, IPCOM EX SC1100, 1300, 2300, 2500,...

PT-2022-2513

Name of the Vulnerable Software and Affected Versions AVEVA InTouch Access Anywhere affected versions not specified Plant SCADA Access Anywhere affected versions not specified Description The issue is related to the disclosure of information in an error data area, which can be exploited by a remo...

CVE-2022-28810

Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with...

PT-2022-3578

Name of the Vulnerable Software and Affected Versions CENTUM VP versions R4.01.00 through R4.03.00 CENTUM VP Small versions R4.01.00 through R4.03.00 CENTUM VP Basic versions R4.01.00 through R4.03.00 B/M9000 VP versions R6.01.01 through R6.03.02 Description The issue exists due to the lack of...

PT-2022-17829

Name of the Vulnerable Software and Affected Versions Zyxel VMG3312-T20A firmware version 5.30ABFX.5C0 Description A command injection vulnerability in the CGI program could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface...

CVE-2022-22986

Netcommunity OG410X and OG810X series Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi firmware Ver.2.28 and earlier allow an attacker on the adjacent network to execute an arbitrary OS command via a specially crafted config file...

Remote Code Execution

spring-cloud-function-context is vulnerable to remote code execution. The routing functionality allows a user to provide a malicious SpEL as a routing-expression which would allow arbitrary OS commands to be executed remotely...

PT-2022-17415

Name of the Vulnerable Software and Affected Versions UNIVERGE WA 1020 versions 8.2.11 and prior UNIVERGE WA 1510 versions 8.2.11 and prior UNIVERGE WA 1511 versions 8.2.11 and prior UNIVERGE WA 1512 versions 8.2.11 and prior UNIVERGE WA 2020 versions 8.2.11 and prior UNIVERGE WA 2021 versions...

Command injection

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

PT-2022-2717

Name of the Vulnerable Software and Affected Versions Zyxel NWA-1100-NH affected versions not specified Description A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware exists due to the lack of measures to neutralize special elements used in operating system...

CVE-2021-4029: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary OS commands via a LAN interface...