CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
394 vulnerabilities with CWE-88
CVE-2022-24066
HIGH
simple-git <3.5.0 - Command Injection
CVSS 8.1
CVE-2022-24440
HIGH
cocoapods-downloader <1.6.0, 1.6.2-1.6.3 - Command Injection
CVSS 8.1
CVE-2022-21223
HIGH
cocoapods-downloader < 1.6.2 - Command Injection via hg Argument Injection
CVSS 8.1
CVE-2022-21235
HIGH
vcs < 1.13.3 - Command Injection via hg Argument Injection
CVSS 8.1
CVE-2022-25766
HIGH
ungit < 1.5.20 - Remote Code Execution via Git Fetch Argument Injection
CVSS 8.8
CVE-2022-21187
HIGH
libvcs < 0.11.1 - OS Command Injection via hg clone URL Parameter
CVSS 8.1
CVE-2022-24433
HIGH
simple-git <3.3.0 - Command Injection
CVSS 8.1
CVE-2022-23915
HIGH
Weblate < 4.11.1 - Authenticated Remote Code Execution via Argument Injection
CVSS 7.2
CVE-2022-24953
MEDIUM
Crypt_GPG < 1.6.7 - Argument Injection via GPG Command Options
CVSS 5.3
CVE-2022-23221
CRITICAL
H2 Console <2.1.210 - RCE
CVSS 9.8
CVE-2021-1484
MEDIUM
Cisco Catalyst SD-WAN Manager - Authenticated Command Injection via Device Template Configuration
CVSS 6.5
CVE-2021-46850
HIGH
myVesta Control Panel <0.9.8-26-43 - Command Injection
CVSS 7.2
CVE-2021-33473
CRITICAL
Dragonfly Ruby Gem <1.3.0 - Command Injection
CVSS 9.1
CVE-2021-43736
CRITICAL
CmsWing CMS 1.3.7 - Remote Code Execution via Log Rule Parameter
CVSS 9.8
CVE-2021-43809
MEDIUM
Bundler < 2.2.33 - Command Injection via Git URL Argument
CVSS 6.7
CVE-2021-37040
CRITICAL
HarmonyOS < 2.0 - Parameter Injection via CIFS Share Mounting
CVSS 9.8
CVE-2021-41146
HIGH
qutebrowser 1.7.0-2.4.0 - Remote Code Execution via URL Handler Command Injection
CVSS 8.8
CVE-2021-38112
HIGH
Amazon AWS WorkSpaces 3.0.10-3.1.8 - Remote Code Execution via Argument Injection in workspaces:// URI Handler
CVSS 8.8
CVE-2021-41316
HIGH
Device42 Main Appliance <17.05.01 - Code Injection
CVSS 8.1
CVE-2021-34718
HIGH
Cisco IOS XR - Privilege Escalation
CVSS 8.1
CVE-2021-21814
HIGH
ATT XMill - Buffer Overflow via Command Line Argument
CVSS 7.8
CVE-2021-3045
MEDIUM
Palo Alto Networks PAN-OS <8.1.19, <9.0.14, <9.1.10 - Command Injec...
CVSS 4.9
CVE-2021-3540
MEDIUM
Ivanti MobileIron Core <11.1.0.0 - RCE
CVSS 6.5
CVE-2021-34816
HIGH
Etherpad 1.8.13 - Command Injection
CVSS 7.2
CVE-2021-36122
HIGH
Echo ShareCare 8.15.5 - Command Injection
CVSS 8.8
Details
Vulnerabilities
394