CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Parent: CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

326 vulnerabilities with CWE-88
CVE-2023-44452 HIGH
Linuxmint Xreader - Remote Code Execution
CVSS 7.8
CVE-2023-20260 MEDIUM
Cisco Prime Infrastructure - Privilege Escalation
CVSS 6.0
CVE-2023-6634 HIGH
LearnPress <4.2.5.7 - Command Injection
CVSS 8.1
CVE-2023-47804 HIGH
Apache OpenOffice - RCE
CVSS 8.8
CVE-2023-46681 HIGH
VR-S1000 <2.37 - Command Injection
CVSS 7.8
CVE-2023-6792 MEDIUM
Paloaltonetworks Pan-os < 8.1.24 - Command Injection
CVSS 5.5
CVE-2023-49096 HIGH
Jellyfin - Command Injection
CVSS 7.7
CVE-2023-6269 CRITICAL
Atos Unify OpenScape <V10 R3.4.0, V10R10.12.00, V10R11.05.02 - Comm...
CVSS 10.0
CVE-2023-0633 HIGH
Docker Desktop < 4.12.0 - Privilege Escalation
CVSS 7.2
CVE-2023-26143 MEDIUM
blamer <1.0.4 - Command Injection
CVSS 6.5
CVE-2023-39288 MEDIUM
Mitel MiVoice Connect <9.6.2304.102 - Command Injection
CVSS 5.5
CVE-2023-39287 MEDIUM
Mitel MiVoice Connect <19.3 SP3 - Command Injection
CVSS 5.5
CVE-2023-20224 HIGH
Cisco ThousandEyes Enterprise Agent - Privilege Escalation
CVSS 7.8
CVE-2023-26310 HIGH
Mobile Phone Backup App - Command Injection
CVSS 7.4
CVE-2023-33378 CRITICAL
Connected IO <2.1.0 - Command Injection
CVSS 9.8
CVE-2023-33376 CRITICAL
Connected IO <2.1.0 - Command Injection
CVSS 9.8
CVE-2023-30577 HIGH
AMANDA <tag-community-3.5.4 - Info Disclosure
CVSS 7.8
CVE-2023-34395 HIGH
Apache-airflow-providers-odbc < 4.0.0 - Privilege Escalation
CVSS 7.8
CVE-2023-25356 HIGH
CoreDial sipXcom <=21.04 - Command Injection
CVSS 8.8
CVE-2022-31749 MEDIUM
WatchGuard Fireware OS <12.8.1-12.5.10 - Command Injection
CVSS 6.5
CVE-2022-37705 MEDIUM
Zmanda Amanda - Privilege Escalation
CVSS 6.7
CVE-2022-47502 HIGH
Apache OpenOffice - Code Injection
CVSS 7.8
CVE-2022-40677 HIGH
Fortinet FortiNAC <9.4.0 - Command Injection
CVSS 7.2
CVE-2022-4864 MEDIUM
froxlor/froxlor <2.0.0-beta1 - Command Injection
CVSS 5.4
CVE-2022-46883 HIGH
Mozilla Firefox <106 - Memory Corruption
CVSS 8.8
Details
Vulnerabilities 326
Links
MITRE CWE Entry Search this CWE With Exploits