#cwe-77

共收录 709 条相关情报。

← 返回所有主题

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation ...

CVE-2026-44871

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip writes zip entries to disk using new File(baseDir, zipEntry.getName()) with no canonical...

CVE-2026-44257

efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip writes zip entries to disk usin

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

A vulnerability in the command line interface of Access Points running AOS-10 could allow an...

CVE-2026-23823

A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attack

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:high

漏洞预警2026-05-12 发布INFO

A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote...

CVE-2026-44872

A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Su

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation ...

CVE-2026-44870

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow...

CVE-2026-44869

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow...

CVE-2026-44866

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow...

CVE-2026-44865

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote ...

CVE-2026-44854

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote ...

CVE-2026-44853

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Suc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template synta...

CVE-2026-8431

An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggeri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation ...

CVE-2026-23823

A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.

CVE-2026-42893

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.

CVE-2026-41611

Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthoriz

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-80

漏洞预警2026-05-12 发布INFO

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and pa...

CVE-2026-43990

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-05-12 发布INFO

An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and...

CVE-2026-40135

An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that all

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:medium

安全公告2026-05-12 发布INFO

Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated...

CVE-2026-34259

Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administ

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-77 #severity:high

漏洞预警2026-05-12 发布MEDIUM

An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated attacker with administrative access ...

CVE-2026-40135

CVE-2026-40135 是 SAP NetWeaver Application Server for ABAP 和 ABAP Platform 中的一个操作系统命令注入漏洞。该漏洞允许经过身份验证且具有管理权限的攻击者在服务器上执行特

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布HIGH

Due to an OS Command Execution vulnerability in SAP Forecasting & Replenishment, an authenticated attacker with administrative authorizations could abuse a non-remote-enabled fu...

CVE-2026-34259

该漏洞存在于SAP Forecasting & Replenishment组件中，是一个操作系统命令执行漏洞。攻击者需具有管理员身份认证，并利用一个非远程启用的函数来执行任意操作系统命令。成功利用后，攻击者可读取或修改任何系统数据，甚至关闭

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ip_address results in com...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-77