Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-77 (在命令中使用的特殊元素转义处理不恰当(命令注入)) — Vulnerability Class 1153

1153 vulnerabilities classified as CWE-77 (在命令中使用的特殊元素转义处理不恰当(命令注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-22630 WordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability — Widget Options 9.9 Critical2025-02-14
CVE-2025-24861 Outback Power Mojave Inverter Command Injection — Mojave Inverter 7.5 High2025-02-13
CVE-2024-12251 Improper neutralization special element in hyperlinks — Telerik UI for WinUI 7.8 High2025-02-12
CVE-2023-5878 OneWireless command injection possible when updating firmware — OneWireless Network Wireless Device Manager 8.8 -2025-02-06
CVE-2025-23239 BIG-IP iControl REST vulnerability — BIG-IP 8.7 High2025-02-05
CVE-2024-23971 ChargePoint Home Flex OCPP bswitch Command Injection — Home Flex 8.8 High2025-01-30
CVE-2024-48841 Remote Code Execution (RCE) Vulnerabilities — FLXEON 10.0 Critical2025-01-27
CVE-2024-52325 ECOVACS robot lawnmowers and vacuums command injection — GOAT G1 9.6 Critical2025-01-23
CVE-2025-23196 Apache Ambari: Code Injection Vulnerability in Ambari Alert Definition — Apache Ambari 8.8 -2025-01-21
CVE-2024-54681 Ossur Mobile Logic Application Command Injection — Mobile Logic Application 3.5 Low2025-01-17
CVE-2025-0528 Tenda AC8/AC10/AC18 HTTP Request telnet command injection — AC8 7.2 High2025-01-17
CVE-2024-34166 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 10.0 Critical2025-01-14
CVE-2024-39761 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 10.0 Critical2025-01-14
CVE-2024-39760 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 10.0 Critical2025-01-14
CVE-2024-39759 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 10.0 Critical2025-01-14
CVE-2024-39763 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39762 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39765 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39764 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39367 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-37186 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39783 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39782 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39781 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39360 WAVLINK AC3000 命令注入漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2025-0396 exelban stats XPC Service shouldAcceptNewConnection command injection — stats 7.8 High2025-01-12
CVE-2025-0328 KaiYuanTong ECT Platform HTTP POST Request runCode.php command injection — ECT Platform 7.3 High2025-01-09
CVE-2022-32203 Huawei CV81-WDM FW 操作系统命令注入漏洞 — CV81-WDM FW 9.8 Critical2024-12-20
CVE-2024-12111 Potential LDAP injection vulnerability in OpenText Privileged Access Manager — Privileged Access Manager 8.0 High2024-12-19
CVE-2023-23356 QuFirewall — QuFirewall 5.5 Medium2024-12-19

Vulnerabilities classified as CWE-77 (在命令中使用的特殊元素转义处理不恰当(命令注入)) represent 1153 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.