Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-77 (在命令中使用的特殊元素转义处理不恰当(命令注入)) — Vulnerability Class 1153

1153 vulnerabilities classified as CWE-77 (在命令中使用的特殊元素转义处理不恰当(命令注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-49042 Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability — Azure Database for PostgreSQL Flexible Server 7.2 High2024-11-12
CVE-2024-49026 Microsoft Excel Remote Code Execution Vulnerability — Microsoft Office 2019 7.8 High2024-11-12
CVE-2024-49557 Dell SmartFabric OS10 命令注入漏洞 — SmartFabric OS10 Software 7.8 High2024-11-12
CVE-2024-49560 Dell SmartFabric OS10 命令注入漏洞 — SmartFabric OS10 Software 7.8 High2024-11-12
CVE-2024-50591 Local Privilege Escalation via Command Injection — Elefant Software Updater 6.7 -2024-11-08
CVE-2024-51736 Command execution hijack on Windows with Process class in symfony/process — symfony--2024-11-06
CVE-2024-20418 Cisco Ultra-Reliable Wireless Backhaul Software Command Injection Vulnerability — Cisco Aironet Access Point Software (IOS XE Controller) 10.0 Critical2024-11-06
CVE-2024-9579 Certain Poly Video Conference Devices – Potential Remote Code Execution — Certain Poly Video Conference Devices 7.5 High2024-11-05
CVE-2024-10697 Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection — AC6 6.3 Medium2024-11-02
CVE-2024-10435 didi Super-Jacoco triggerEnvCov command injection — Super-Jacoco 6.3 Medium2024-10-28
CVE-2024-10429 WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection — WN530H4 7.2 High2024-10-27
CVE-2024-10428 WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection — WN530H4 7.2 High2024-10-27
CVE-2024-10193 WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection — WN530H4 4.7 Medium2024-10-20
CVE-2024-39563 Junos Space: Remote Command Execution (RCE) vulnerability in web application — Junos Space 7.3 High2024-10-11
CVE-2024-9793 Tenda AC1206 ate ate_ifconfig_set command injection — AC1206 6.3 Medium2024-10-10
CVE-2024-38817 VMware NSX 安全漏洞 — VMware NSX, VMware Cloud Foundation 6.7 Medium2024-10-09
CVE-2024-7840 Improper neutralization special element in hyperlinks — Telerik Reporting 7.8 High2024-10-09
CVE-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability — Azure CLI 8.7 High2024-10-08
CVE-2024-43497 DeepSpeed Remote Code Execution Vulnerability — DeepSpeed 8.4 High2024-10-08
CVE-2024-43601 Visual Studio Code for Linux Remote Code Execution Vulnerability — Visual Studio Code for Linux 7.8 High2024-10-08
CVE-2024-9380 Ivanti CSA 安全漏洞 — CSA (Cloud Services Appliance) 7.2 High2024-10-08
CVE-2024-47562 Siemens SINEC Security Monitor 安全漏洞 — SINEC Security Monitor 8.8 High2024-10-08
CVE-2024-20492 Cisco Expressway Series Privilege Escalation Vulnerability — Cisco TelePresence Video Communication Server (VCS) Expressway 6.0 Medium2024-10-02
CVE-2024-20432 Cisco Nexus Dashboard Fabric Controller Web UI Command Injection Vulnerability — Cisco Data Center Network Manager 9.9 Critical2024-10-02
CVE-2024-20365 Cisco Integrated Management Controller Redfish Command Injection Vulnerability — Cisco Unified Computing System (Managed) 6.5 Medium2024-10-02
CVE-2024-9145 Local command injection in Wiz Code Visual Studio Code extension — Wiz Code Visual Studio Code extension 7.8 -2024-10-01
CVE-2024-39577 Dell SmartFabric OS10 命令注入漏洞 — SmartFabric OS10 Software 7.1 High2024-09-26
CVE-2024-8405 Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack — PaperCut NG, PaperCut MF 6.1 Medium2024-09-26
CVE-2024-7575 Improper neutralization special element in hyperlinks — Telerik UI for WPF 7.8 High2024-09-25
CVE-2024-7679 Improper neutralization special element in hyperlinks — Telerik UI for WinForms 7.8 High2024-09-25

Vulnerabilities classified as CWE-77 (在命令中使用的特殊元素转义处理不恰当(命令注入)) represent 1153 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.