CVE-2021-3934

ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command...

CVE-2021-3934

ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command...

The vulnerability of the txtID parameter in the xp_cmdshell procedure of the BillQuick Web Suite’s time and attendance system allows a perpetrator to execute arbitrary code.

The vulnerability of the txtID parameter in the xpcmdshell procedure of the BillQuick Web Suite payroll and accounting system is related to errors during the elimination of special elements in SQL queries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the urllib3 module in the Python programming language lies in its insufficient ability to neutralize special elements in requests. This allows attackers to gain access to sensitive data and compromise its integrity.

The vulnerability of the urllib3 method in the Python programming language lies in the insufficient neutralization of special elements in HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Moxa MXView network control software lies in its failure to eliminate special elements, allowing a violator to execute arbitrary code.

The vulnerability of the Moxa MXView network control software lies in the lack of measures taken to neutralize special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted reques...

The vulnerability of the CLI component of the Cisco IOS XR operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are due to the lack of measures taken to neutralize special elements used in the operating system’s command structure. This vulnerability allows attackers to increase their privileges.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 exists due to the failure to take measures to neutralize special elements used in the operating...

The vulnerability of the Akkadian Provisioning Manager Engine lies in its lack of measures to neutralize special elements used in the operating system command line. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Akkadian Provisioning Manager Engine exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the FUEL CMS content management system, which arises due to the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions in the fuel/modules/fuel/config/fuelconstants.php and fuel/modules/fuel/libraries/Asset.php files of the FUEL CMS content management system exists due to the lack of measures taken to neutralize these special elements. Exploiting this vulnerability can allow a...

The vulnerability of Moxa EDR-810 microcontroller software lies in the lack of measures taken to neutralize special elements used in the OS command sequence, allowing a perpetrator to execute arbitrary code.

The vulnerability of Moxa EDR-810 microcontroller-based software relates to the lack of measures taken to neutralize special elements used in the OS command sequence. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Abb Base Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

Se Ecostruxure Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software versions in security notification. The result of this vulnerability, DLL substitution, coul...

CVE-2021-26097

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTT...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in github.com/argoproj/argo-workflows...

The vulnerability of the command-line interface of the FortiWAN traffic balancing system allows a attacker to increase their privileges.

The vulnerability of the command-line interface of the FortiWAN traffic balancing system exists because measures to neutralize special elements used in the operating system’s command line are not taken. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Archive_Tar class in the PHP classes library of PEAR allows a attacker to overwrite protected files.

The vulnerability of the ArchiveTar class in the PHP classes library of PEAR is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability could allow an attacker to overwrite protected files by using a specially crafted...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the lack of measures taken to neutralize special elements used in operating system commands, allowing a perpetrator to execute arbitrary OS commands on the target system.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary OS commands on the target...

The vulnerability of the kramdown gem interpreter for Ruby, allowing a hacker to execute arbitrary code.

The vulnerability of the kramdown gem interpreter for Ruby exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of RSA Security Analytics and Netwitness Platform’s security tools lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of the RSA Security Analytics and Netwitness Platform security tools exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the VisitMixin and visitMixinBlock functions in the HTML Pug preprocessor allows a hacker to execute arbitrary code.

The vulnerability of the VisitMixin and visitMixinBlock functions in the HTML Pug preprocessor is related to deficiencies in the process of eliminating special elements from the output data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...