#cwe-78

共收录 1626 条相关情报。

漏洞预警2026-09-08 发布INFO

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute ...

CVE-2026-61517

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic han

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-08 发布INFO

Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore

CVE-2026-86733

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-78

漏洞预警2026-09-08 发布INFO

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-...

CVE-2026-71376

OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-08 发布INFO

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile conte...

CVE-2026-76561

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import fun

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-08 发布INFO

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project...

CVE-2026-86540

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, a

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-09-07 发布INFO

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafti...

CVE-2026-86540

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, a

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-80127

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an...

CVE-2026-80127

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an...

CVE-2026-78488

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-07 发布INFO

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command...

CVE-2026-19843

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-07 发布INFO

Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injec...

CVE-2026-61409

Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-07 发布INFO

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler...

CVE-2026-86299

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cg

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-07 发布INFO

An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafte...

CVE-2026-84256

An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authe

历史摘要 · 未重新核验 · NVD

#cve #cwe-78 #cwe-88

漏洞预警2026-09-06 发布CRITICAL

A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Execu...

CVE-2026-86152

Tenda CP3 固件版本 27.5.57.101 中存在一个高危命令注入漏洞。漏洞位于 Functions/AutoAddWifi.cpp 文件中的 CAutoAddWifi::ThreadProc 函数，属于 Kylin 组件。攻击者

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-06 发布CRITICAL

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Managemen...

CVE-2026-86151

CVE-2026-86151 影响腾达（Tenda）CP3 固件版本 27.5.57.101。该漏洞源于设备网络配置管理组件（Apis/system.c）中的函数 sub_2F77E8 存在操作系统命令注入缺陷。远程攻击者在具备高权限（基于

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-05 发布CRITICAL

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface...

CVE-2026-86149

根据 NVD 的元数据，Tenda CP3 固件版本 27.5.57.101 被报告存在于 Net/NetCheckPing.cpp 文件中的操作系统命令注入漏洞。攻击者可通过控制 interface_name 和 host 参数，向底层系

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-05 发布CRITICAL

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulatio...

CVE-2026-86148

CVE-2026-86148 是 Tenda CP3 智能设备（固件版本 27.5.57.101）中存在的一处操作系统命令注入漏洞。根据 NVD 元数据，该漏洞位于组件 Kylin 的 Apis/system.c 文件中，涉及函数 Syst

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

安全公告2026-09-04 发布INFO

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Sonic

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

漏洞预警2026-09-04 发布INFO

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during databa...

CVE-2026-53932

laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted back

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-04 发布INFO

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management in...

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Sonic

历史摘要 · 未重新核验 · NVD

#cve #cwe-78