CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
394 vulnerabilities with CWE-88
CVE-2019-12578
HIGH
London Trust Media PIA VPN Client v82 - Privilege Escalation
CVSS 7.8
CVE-2019-13475
HIGH
MobaXterm 11.1 - Remote Code Execution via mobaxterm: URI Handler Argument Injection
CVSS 8.8
CVE-2019-8321
HIGH
RubyGems 2.6.0-3.0.2 - Escape Sequence Injection via Gem::UserInteraction#verbose
CVSS 7.5
CVE-2019-11582
HIGH
Atlassian Sourcetree for Windows <3.1.3 - Command Injection
CVSS 8.8
CVE-2019-5804
MEDIUM
Chrome < 73.0.3683.75 - Domain Spoofing via Crafted Domain Name
CVSS 5.5
CVE-2019-1780
MEDIUM
Cisco NX-OS and FXOS - Authenticated Command Injection via CLI Arguments
CVSS 6.7
CVE-2019-1795
MEDIUM
Cisco NX-OS <8.2(3) & Firepower <2.0.1.201 - Authenticated CLI Command Injection
CVSS 6.7
CVE-2019-1791
MEDIUM
Cisco NX-OS 5.2-6.2(25) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1790
MEDIUM
Cisco NX-OS 5.2-6.2(25) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1784
MEDIUM
Cisco NX-OS < 7.3(5)n1(1) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1783
MEDIUM
Cisco NX-OS < 7.3(4)n1(1) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1782
MEDIUM
Cisco FXOS and NX-OS - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1781
MEDIUM
Cisco FXOS and NX-OS - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1779
MEDIUM
Cisco FXOS and NX-OS - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1735
HIGH
Cisco NX-OS < 8.3(1) - Authenticated Command Injection via CLI Argument
CVSS 7.8
CVE-2019-3931
HIGH
Crestron AM-100/101 <1.6.0.2/<2.7.0.2 - Command Injection
CVSS 8.8
CVE-2019-9794
CRITICAL
Firefox < 66 and Thunderbird < 60.6 - Argument Injection via URL Handler Command Line Arguments
CVSS 9.8
CVE-2019-0764
MEDIUM
Microsoft Browsers - Info Disclosure
CVSS 6.5
CVE-2019-1613
MEDIUM
Cisco NX-OS - Authenticated Command Injection via CLI Arguments
CVSS 6.7
CVE-2019-1611
MEDIUM
Cisco NX-OS and FX-OS - Authenticated Command Injection via CLI Arguments
CVSS 6.7
CVE-2019-1610
MEDIUM
Cisco NX-OS 7.0(3)-7.0(3)I7(3) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1609
MEDIUM
Cisco NX-OS 8.2-8.3(2) - Authenticated Command Injection via CLI Arguments
CVSS 6.7
CVE-2019-1608
MEDIUM
Cisco NX-OS 8.2-8.3(1) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1607
MEDIUM
Cisco NX-OS 8.0-8.2(3) - Authenticated Command Injection via CLI Argument
CVSS 6.7
CVE-2019-1606
HIGH
Cisco NX-OS 7.0(3)I7-7.0(3)I7(4) - Authenticated Command Injection via CLI Arguments
CVSS 7.8
Details
Vulnerabilities
394