#cwe-78

共收录 1627 条相关情报。

漏洞预警2026-09-04 发布INFO

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management in...

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Sonic

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-04 发布INFO

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...

CVE-2026-85656

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a lo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

漏洞预警2026-09-04 发布INFO

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileg...

CVE-2026-85656

An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a lo

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements.

CVE-2026-18073

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to im

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-17499

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization o

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

CVE-2026-16826

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization o

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping...

CVE-2026-85696

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsaniti...

CVE-2026-85672

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file exte

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-04 发布INFO

cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPERATORS is enabled. Attackers can use ...

CVE-2026-85660

cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-04 发布INFO

SadTalker OS Command Injection via Audio Filename

CVE-2026-85696

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-78

漏洞预警2026-09-04 发布INFO

XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.

CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

安全公告2026-09-04 发布INFO

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's...

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitD

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:high

安全公告2026-09-04 发布INFO

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client...

CVE-2026-85426

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization.

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

安全公告2026-09-04 发布INFO

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS...

CVE-2026-85425

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-78 #severity:critical

漏洞预警2026-09-03 发布INFO

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() function that fails to sanitize shell metacharacters...

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitD

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-03 发布INFO

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization. Attackers can inject shell metacharacters into client na...

CVE-2026-85426

MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without sanitization.

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-03 发布INFO

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsanitized text to a shell command. Attackers can publi...

CVE-2026-85425

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes

历史摘要 · 未重新核验 · NVD

#cve #cwe-78

漏洞预警2026-09-03 发布INFO

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file_sharing.cgi of the component File Sharing. Executing a m...

CVE-2026-85224

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-03 发布INFO

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Perform...

CVE-2026-85223

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78

漏洞预警2026-09-03 发布INFO

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addon_center.cgi of the component Add-...

CVE-2026-85222

A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of

历史摘要 · 未重新核验 · NVD

#cve #cwe-77 #cwe-78