Base de CVEs

CVE-2015-20107 Alta · 7.6 CWE-77 13/04/2022

In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

CVE-2021-22899 Alta · 8.8 KEV Alta · 56 CWE-77 27/05/2021

Ivanti Pulse Connect Secure Command Injection Vulnerability

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature

CVE-2021-1498 Crítica · 9.8 KEV Urgente · 79 Exploit público CWE-77 06/05/2021

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVE-2020-2509 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-77 17/04/2021

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later

CVE-2018-19949 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-77 28/10/2020

QNAP NAS File Station Command Injection Vulnerability

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.

CVE-2020-25079 Alta · 8.8 KEV Alta · 56 CWE-77 02/09/2020

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command injection.

CVE-2010-5330 Crítica · 9.8 KEV Alta · 63 CWE-77 11/06/2019

Ubiquiti AirOS Command Injection Vulnerability

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.

CVE-2019-0541 Alta · 8.8 KEV Alta · 64 Exploit público CWE-77 08/01/2019

Microsoft MSHTML Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

CVE-2018-1000802 Crítica · 9.8 CWE-77 18/09/2018

Command Injection em Python

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.

CVE-2017-6327 Alta · 8.8 KEV Alta · 64 Exploit público CWE-77 11/08/2017

Symantec Messaging Gateway Remote Code Execution Vulnerability

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.

CVE-2016-1555 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 21/04/2017

NETGEAR Multiple WAP Devices Command Injection Vulnerability

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

CVE-2016-6367 Alta · 7.8 KEV Alta · 64 Exploit público CWE-77 18/08/2016

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

CVE-2016-3081 Alta · 8.1 KEV Urgente · 76 Exploit público CWE-77 26/04/2016

Apache Struts Command Injection Vulnerability

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

CVE-2015-2051 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-77 23/02/2015

D-Link DIR-645 Router Remote Code Execution Vulnerability

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

CVE-2014-7209 Alta · 7.5 CWE-77 06/01/2015

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent...

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

CVE-2012-1823 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 11/05/2012

PHP-CGI Query String Parameter Vulnerability

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.

CVE-2010-4345 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-77 14/12/2010

Exim Privilege Escalation Vulnerability

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

CVE-2007-3010 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 18/09/2007

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

CVE-2005-2773 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-77 02/09/2005

HP OpenView Network Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.