CWE-77

CVE-2022-0764

February 23, 2023 by

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

CVE-2023-24612

February 22, 2023 by godfreyd94

The PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an option.

CVE-2023-24276

February 22, 2023 by godfreyd94

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.

CVE-2023-24138

February 22, 2023 by godfreyd94

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function.

CVE-2023-24139

February 22, 2023 by godfreyd94

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function.

CVE-2023-24140

February 22, 2023 by godfreyd94

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function.