CWE-78 OS命令中使用的特殊元素转义处理不恰当(OS命令注入) 类弱点 2682 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-40720 | D-Link DIR-2150 操作系统命令注入漏洞 — DIR-2150 | 8.8 | - | 2023-01-26 |
| CVE-2022-21810 | smartctl 安全漏洞 — smartctl | 7.4 | High | 2023-01-25 |
| CVE-2022-25962 | Vagrant 安全漏洞 — vagrant.js | 7.4 | High | 2023-01-25 |
| CVE-2022-29843 | Western Digital My Cloud 操作系统命令注入漏洞 — My Cloud | 6.2 | Medium | 2023-01-25 |
| CVE-2022-25908 | npm create-choo-electron 安全漏洞 — create-choo-electron | 7.4 | High | 2023-01-24 |
| CVE-2022-25350 | node-puppet-facter 安全漏洞 — puppet-facter | 7.4 | High | 2023-01-24 |
| CVE-2022-20964 | Cisco Identity Services Engine 操作系统命令注入漏洞 — Cisco Identity Services Engine Software | 6.3 | Medium | 2023-01-18 |
| CVE-2022-47911 | Sewio Real-Time Location System (RTLS) Studio 操作系统命令注入漏洞 — RTLS Studio | 9.1 | Critical | 2023-01-18 |
| CVE-2022-43483 | Sewio Real-Time Location System (RTLS) Studio 操作系统命令注入漏洞 — RTLS Studio | 9.1 | Critical | 2023-01-18 |
| CVE-2022-41955 | Autolab 命令注入漏洞 — Autolab | 8.8 | High | 2023-01-14 |
| CVE-2022-21191 | global-modules-path 安全漏洞 — global-modules-path | 7.4 | High | 2023-01-13 |
| CVE-2022-42290 | NVIDIA BMC 操作系统命令注入漏洞 — NVIDIA DGX servers | 7.2 | High | 2023-01-13 |
| CVE-2022-42289 | NVIDIA BMC 操作系统命令注入漏洞 — NVIDIA DGX servers | 7.2 | High | 2023-01-13 |
| CVE-2022-42279 | NVIDIA BMC 操作系统命令注入漏洞 — NVIDIA DGX servers | 7.2 | High | 2023-01-13 |
| CVE-2023-22598 | InHand Networks InRouter302 操作系统命令注入漏洞 — InRouter 302 | 7.2 | High | 2023-01-12 |
| CVE-2022-43390 | Zyxel NR7101 操作系统命令注入漏洞 — NR7101 firmware | 5.4 | Medium | 2023-01-11 |
| CVE-2022-25890 | npm wifey 安全漏洞 — wifey | 7.4 | High | 2023-01-09 |
| CVE-2022-36926 | Zoom Rooms 安全漏洞 — Zoom Rooms for macOS | 8.8 | High | 2023-01-09 |
| CVE-2022-43971 | Linksys WUMC710 操作系统命令注入漏洞 — Linksys WUMC710 Wireless-AC Universal Media Connector | 7.2 | High | 2023-01-09 |
| CVE-2022-43973 | Linksys WRT54GL 操作系统命令注入漏洞 — WRT54GL Wireless-G Broadband Router | 7.2 | High | 2023-01-09 |
| CVE-2022-25923 | exec-local-bin 安全漏洞 — exec-local-bin | 7.4 | High | 2023-01-06 |
| CVE-2022-25926 | window-control 安全漏洞 — window-control | 7.4 | High | 2023-01-04 |
| CVE-2022-39947 | Fortinet FortiADC 操作系统命令注入漏洞 — FortiADC | 8.6 | High | 2023-01-03 |
| CVE-2022-35845 | FortiTester 操作系统命令注入漏洞 — FortiTester | 7.6 | High | 2023-01-03 |
| CVE-2022-40740 | Realtek GPON router 安全漏洞 — GPON router | 7.2 | High | 2023-01-03 |
| CVE-2022-46304 | ServiSign 操作系统命令注入漏洞 — ServiSign | 8.8 | High | 2023-01-03 |
| CVE-2021-4281 | Brave 操作系统命令注入漏洞 — for-the-badge | 4.6 | Medium | 2022-12-26 |
| CVE-2022-44567 | Rocket.Chat 操作系统命令注入漏洞 — Rocket.chat - Electron Desktop | 9.8 | - | 2022-12-23 |
| CVE-2022-3183 | Dataprobe iBoot-PDU 操作系统命令注入漏洞 — iBoot-PDU FW | 9.8 | Critical | 2022-12-21 |
| CVE-2022-4643 | docconv 操作系统命令注入漏洞 — docconv | 6.3 | Medium | 2022-12-21 |
CWE-78（OS命令中使用的特殊元素转义处理不恰当(OS命令注入)） 是常见的弱点类别，本平台收录该类弱点关联的 2682 条 CVE 漏洞。