CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Parent: CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

326 vulnerabilities with CWE-88
CVE-2021-41316 HIGH
Device42 Main Appliance <17.05.01 - Code Injection
CVSS 8.1
CVE-2021-34718 HIGH
Cisco IOS XR - Privilege Escalation
CVSS 8.1
CVE-2021-21814 HIGH
ATT XMill - Buffer Overflow via Command Line Argument
CVSS 7.8
CVE-2021-3045 MEDIUM
Palo Alto Networks PAN-OS <8.1.19, <9.0.14, <9.1.10 - Command Injec...
CVSS 4.9
CVE-2021-3540 MEDIUM
Ivanti MobileIron Core <11.1.0.0 - RCE
CVSS 6.5
CVE-2021-34816 HIGH
Etherpad 1.8.13 - Command Injection
CVSS 7.2
CVE-2021-36122 HIGH
Echo ShareCare 8.15.5 - Command Injection
CVSS 8.8
CVE-2021-3256 MEDIUM
KuaiFanCMS V5.x - Info Disclosure
CVSS 6.5
CVE-2021-33564 CRITICAL
Dragonfly <1.4.0 - Command Injection
CVSS 9.8
CVE-2021-1531 HIGH
Cisco Modeling Labs - Command Injection
CVSS 8.8
CVE-2021-31909 CRITICAL
Jetbrains Teamcity < 2020.2.3 - Remote Code Execution
CVSS 9.8
CVE-2021-29472 HIGH
Composer < 1.10.22 - Remote Code Execution
CVSS 8.8
CVE-2021-29461 HIGH
Demon1a Discord-recon - Remote Code Execution
CVSS 8.1
CVE-2021-1485 MEDIUM
Cisco IOS XR - Command Injection
CVSS 6.6
CVE-2021-21386 CRITICAL
APKLeaks <2.0.3 - RCE
CVSS 9.3
CVE-2021-1454 MEDIUM
Cisco IOS XE SD-WAN - Privilege Escalation
CVSS 6.0
CVE-2021-1383 MEDIUM
Cisco IOS XE SD-WAN - Privilege Escalation
CVSS 6.0
CVE-2021-21384 MEDIUM
shescape <1.1.3 - Code Injection
CVSS 6.3
CVE-2021-24030 CRITICAL
Facebook Gameroom <1.26.0 - Code Injection
CVSS 9.8
CVE-2021-26937 CRITICAL
GNU Screen < 4.8.0 - Denial of Service
CVSS 9.8
CVE-2021-3401 CRITICAL
Bitcoin Core <0.19.0 - RCE
CVSS 9.8
CVE-2020-7851 HIGH
Innorix Web-Based File Transfer Solution <9.2.18.385 - RCE
CVSS 7.8
CVE-2020-7850 HIGH
NBBDownloader.ocx - RCE
CVSS 7.8
CVE-2020-21224 CRITICAL
Inspur Clusterengine - Remote Code Execution
CVSS 9.8
CVE-2020-35136 HIGH
Dolibarr <12.0.3 - Authenticated RCE
CVSS 7.2
Details
Vulnerabilities 326
Links
MITRE CWE Entry Search this CWE With Exploits