The vulnerability of the ImageProcessing software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set, allowing attackers to execute shell commands.

The vulnerability of the ImageProcessing software exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute shell commands...

CVE-2022-1358

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database...

Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...

The vulnerability of the Dropwizard-Validation software lies in its inability to properly eliminate special elements, allowing attackers to execute arbitrary code with privileges of the Dropwizard service account.

The vulnerability of the Dropwizard-Validation software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with privileges of the Dropwizard service account...

The vulnerability of the command-line interface of Cisco’s software-hardware devices, allowing a hacker to execute any command they desire

The vulnerability of the command-line interface of Cisco’s software-hardware devices exists because measures are not taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

FANUC ROBOGUIDE path traversal vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC, Japan.ROBOGUIDE v9.40083.00.05 and earlier versions have a path traversal vulnerability, which originates from an improper restriction of pathnames to restricted directories. An attacker can exploit this vulnerability using special elemen...

CVE-2022-26826: Improper Neutralization of Special Elements used in a Command

Windows DNS Server Remote Code Execution Vulnerability...

CVE-2021-43474: Improper Neutralization of Special Elements used in a Command

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

The vulnerability of the CGI microprogramming system handlers of ZyXEL NBG6816 (Armor Z1) and NBG6817 (Armor Z2) allows a hacker to execute arbitrary commands.

The vulnerability of CGI microprogramming system processors in Wi-Fi routers from ZyXEL NBG6816 Armor Z1 and NBG6817 Armor Z2 lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute...

The vulnerability of the `line_table::line_table` function in the ELF and DWARFv4 reading library Libelfin allows a attacker to cause a service failure.

The vulnerability of the linetable::linetable function in the ELF and DWARFv4 reading library Libelfin is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created ELF file...

The vulnerability in the implementation of the oal_setIp6DefaultRoute() function in the libcmm.so module of the TP-Link TL-WR840N (ES) router’s software allows a attacker to execute arbitrary commands.

The vulnerability in the implementation of the oalsetIp6DefaultRoute function in the libcmm.so module of the TP-Link TL-WR840N ES router’s software lies in the failure to properly handle special elements when processing the ifName argument. Exploiting this vulnerability allows an attacker to...

mySCADA myPRO

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: mySCADA Equipment: myPRO Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary operating system commands injection. 3. TECHNICAL...

The vulnerability of the software platform for developing and managing online stores Magento Commerce allows a hacker to execute arbitrary code.

The vulnerability of the Magento Commerce software development and management platform is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the zsh shell’s command interface, related to the failure to take measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of the zsh shell lies in the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2022-23810

The CVE-2022-23810 issue affects a-blog cms (Appleple) with template injection (Improper Neutralization of Special Elements Used in a Template Engine). A remote authenticated attacker can obtain arbitrary files on the server via unspecified vectors. Affected versions include: 2.8.x before 2.8.75,...

containernetworking/cni improper limitation of path name

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-43929

Improper neutralization of special elements in output used by a downstream component 'Injection' vulnerability in work flow management in Synology DiskStation Manager DSM before 7.0.1-42218-2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2021-41018

CVE-2021-41018 affects Fortinet FortiWeb OS command injection via improper neutralization of special elements in HTTP requests. Affected are FortiWeb versions 6.4.1 and below, and 6.3.15 and below. The vulnerability can allow an attacker to execute unauthorized code or commands through crafted HT...

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

CVE-2022-0323: Improper Neutralization of Special Elements Used in a Template Engine

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...