#cwe-78

共收录 1668 条相关情报。

漏洞预警2025-10-30 发布MEDIUM

An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker. This howeve...

CVE-2025-54941

An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a

来源摘录 · NVD

#cve #cwe-78

漏洞预警2025-01-11 发布CRITICAL

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which...

CVE-2025-0107

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitr

来源摘录 · NVD

#cve #cwe-78

漏洞预警2024-11-06 发布CRITICAL

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi...

CVE-2024-10914

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as cri

来源摘录 · NVD

#cve #cwe-707 #cwe-74 #cwe-78

漏洞预警2024-09-06 发布CRITICAL

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by send...

CVE-2024-8517

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacke

来源摘录 · NVD

#cve #cwe-73 #cwe-78

漏洞预警2024-06-04 发布CRITICAL

UNSUPPORTED WHEN ASSIGNED The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 fir...

CVE-2024-29972

** UNSUPPORTED WHEN ASSIGNED ** The command injection vulnerability in the CGI program "remote_help-cgi" in Zyxel NAS326

来源摘录 · NVD

#cve #cwe-78

漏洞预警2022-06-21 发布HIGH

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters ...

CVE-2022-2068

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehas

来源摘录 · NVD

#cve #cwe-78

漏洞预警2022-05-03 发布HIGH

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is au...

CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distrib

来源摘录 · NVD

#cve #cwe-78

漏洞预警2019-04-15 发布HIGH

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Cod...

CVE-2019-0232

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

来源摘录 · NVD

#cve #cwe-78