Fallos del tipo CWE-78

3878 resultados
CVE-2022-25962HIGHAll versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization. EPSS 1.0%CVE-2023-26127HIGHAll versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. *EPSS 1.0%CVE-2026-27130CRITICALDokploy has Command Injection in its Service OperationsEPSS 1.0%CVE-2022-47555CRITICALImproper Neutralization of Special Elements in Ormazabal productsEPSS 1.0%CVE-2025-66208HIGHConfiguration-Dependent RCE (OS Command Injection) in richdocumentscode proxyEPSS 1.0%CVE-2024-52723CRITICALIn TOTOLINK X6000R V9.4.0cu.1041_B20240224 in the shttpd file, the Uci_Set Str function is used without strict parameter filtering. An attacEPSS 1.0%CVE-2025-57639MEDIUMOS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.userEPSS 1.0%CVE-2022-43758HIGHRancher: Command injection in Git packageEPSS 1.0%CVE-2020-8105CRITICALCommand Execution due to unsanitized inputEPSS 1.0%CVE-2023-1082HIGHWelotec: Command injection vulnerability in TK500v1 router seriesEPSS 1.0%CVE-2024-45252CRITICALElsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')EPSS 1.0%CVE-2024-45251CRITICALElsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')EPSS 1.0%CVE-2023-34108HIGHManipulation of Internal Dovecot Variables in mailcow via crafted PasswordsEPSS 1.0%CVE-2023-35174HIGHLivebook Desktop's protocol handler can be exploited to execute arbitrary command on WindowsEPSS 1.0%CVE-2025-10589HIGHN-Partner｜N-Reporter, N-Cloud, N-Probe - OS Command InjectionEPSS 1.0%CVE-2026-24719MEDIUMQTS, QuTS heroEPSS 1.0%CVE-2012-10028HIGHNetwin SurgeFTP <= v23c8 Authenticated RCEEPSS 1.0%CVE-2025-14213HIGHCato's Socket WebUI is vulnerable to OS Command InjectionEPSS 1.0%CVE-2025-24306HIGHImproper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.EPSS 1.0%CVE-2024-54181HIGHIBM WebSphere Automation command injectionEPSS 1.0%