#cwe-78

共收录 1648 条相关情报。

← 返回所有主题
漏洞预警2026-06-25 发布INFO

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated p...

CVE-2026-9717

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dis...

CVE-2026-55895

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vuln...

CVE-2026-46735

Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Ele

历史摘要 · 未重新核验 · NVD

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows...

CVE-2026-8664

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to exe

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows...

CVE-2026-8658

OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to ex

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on...

CVE-2026-8660

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attack

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute...

CVE-2026-8666

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on...

CVE-2026-8665

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK...

CVE-2026-8592

OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows...

CVE-2026-9155

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execut

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter par...

CVE-2026-8658

OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the ...

CVE-2026-8666

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or e...

CVE-2026-8665

OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote att

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameter...

CVE-2026-8664

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to exe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host paramet...

CVE-2026-8660

OS Command Injection vulnerability in the ping action of Rapid7 InsightConnect Ping Plugin on Linux allows remote attack

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remote attackers to execute arbitrary OS commands via the tex...

CVE-2026-8592

OS Command Injection vulnerability in the process_string action of Rapid7 InsightConnect AWK Plugin on Linux allows remo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the expression parameter due ...

CVE-2026-9155

OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execut

历史摘要 · 未重新核验 · NVD

安全公告2026-06-25 发布INFO

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This...

CVE-2026-9787

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows rem

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This...

CVE-2026-9772

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-25 发布INFO

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows...

CVE-2026-8659

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to exe

历史摘要 · 未重新核验 · GitHub Advisory