CWE-88 · Command and Code Injection
Improper Neutralization of Argument Delimiters in a Command
470CVEs
4exploited
4with a public check
23likely (EPSS 10%+)
SortMost likely exploited
470 CVEs with CWE-88 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-10033In CISA KEVExploitedWordPress PHPMailer < 5.2.18 - Remote Code ExecutionPHP · PHPMailer · CVSS 9.8 · 2016-12-30 | 9.8 | 100% | 2016-12-30 |
| CVE-2026-24061In CISA KEVExploitedtelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.GNU · Inetutils · CVSS 9.8 · 2026-01-21 | 9.8 | 99% | 2026-01-21 |
| CVE-2024-41710In CISA KEVExploitedA vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an authenticate…Mitel · SIP Phones · CVSS 6.8 · 2024-08-12 | 6.8 | 42% | 2024-08-12 |
| CVE-2026-86060In CISA KEVExploitedSSH session privilege manipulation via a crafted username in Mikrotik RouterOSMikrotik · RouterOS · CVSS 9.2 · 2026-09-05 | 9.2 | 6.4% | 2026-09-05 |
| CVE-2021-33564CheckRuby Dragonfly <1.4.0 - Remote Code ExecutionDragonfly Project · Dragonfly · 2021-05-29 | – | 72% | 2021-05-29 |
| CVE-2020-21224CheckInspur ClusterEngine 4.0 - Remote Code ExecutionInspur · Clusterengine · 2021-02-22 | – | 39% | 2021-02-22 |
| CVE-2023-6634CheckLearnPress < 4.2.5.8 - Remote Code Executionthimpress · LearnPress – WordPress LMS Plugin for Create and Sell Online Courses · CVSS 8.1 · 2024-01-11 | 8.1 | 8.6% | 2024-01-11 |
| CVE-2026-40281CheckGotenberg <= 8.30.1 - Remote Code Executiongotenberg · gotenberg · CVSS 10 · 2026-05-06 | 10.0 | 2.3% | 2026-05-06 |
| CVE-2007-0882Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the…Sun · Sunos · 2007-02-12 | – | 99% | 2007-02-12 |
| CVE-2018-17456Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…Git-Scm · Git · 2018-10-06 | – | 97% | 2018-10-06 |
| CVE-2018-19518University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/ima…Php · Php · 2018-11-25 | – | 96% | 2018-11-25 |
| CVE-2022-23221H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSC…H2database · H2 · CVSS 9.8 · 2022-01-19 | 9.8 | 65% | 2022-01-19 |
| CVE-2020-5792Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user to write to arbitrary files and ultimately execute code wi…Nagios · Nagios XI · 2020-10-20 | – | 64% | 2020-10-20 |
| CVE-2019-6453mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .…Mirc · Mirc · 2019-02-18 | – | 55% | 2019-02-18 |
| CVE-2004-0121Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which all…Microsoft · Outlook · 2004-09-01 | – | 48% | 2004-09-01 |
| CVE-2024-52301Laravel allows environment manipulation via query stringlaravel · framework · CVSS 8.7 · 2024-11-12 | 8.7 | 45% | 2024-11-12 |
| CVE-2022-4257C-DATA Web Management System GET Parameter jumpto.php argument injectionC-DATA · Web Management System · CVSS 6.3 · 2022-12-01 | 6.3 | 44% | 2022-12-01 |
| CVE-2025-57791Argument Injection Vulnerability in CommServeCommvault · CommCell · CVSS 6.9 · 2025-08-20 | 6.9 | 39% | 2025-08-20 |
| CVE-2022-25766Remote Code Execution (RCE)Ungit Project · ungit · CVSS 8.8 · 2022-03-21 | 8.8 | 35% | 2022-03-21 |
| CVE-2026-49373In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settingsJetBrains · TeamCity · CVSS 7.1 · 2026-05-29 | 7.1 | 33% | 2026-05-29 |
| CVE-2021-1531Cisco Modeling Labs Web UI Command Injection VulnerabilityCisco · Cisco Modeling Labs · CVSS 8.8 · 2021-05-22 | 8.8 | 30% | 2021-05-22 |
| CVE-2006-4692Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted atta…Microsoft · Windows Xp · 2006-10-10 | – | 30% | 2006-10-10 |
| CVE-2020-13699TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrate…Teamviewer · Teamviewer · 2020-07-29 | – | 26% | 2020-07-29 |
| CVE-2022-37027Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject…Ahsay · Cloud Backup Suite · CVSS 7.2 · 2022-09-21 | 7.2 | 22% | 2022-09-21 |
| CVE-2003-0907Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// U…Microsoft · Windows Xp · 2004-04-16 | – | 22% | 2004-04-16 |
| CVE-2001-0150Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary…Microsoft · Internet Explorer · 2001-05-07 | – | 18% | 2001-05-07 |
| CVE-1999-0113Some implementations of rlogin allow root access if given a -froot parameter.Ibm · Aix · 1999-09-29 | – | 17% | 1999-09-29 |
| CVE-2006-2055Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote…Microsoft · Outlook · 2006-04-26 | – | 15% | 2006-04-26 |
| CVE-2001-0667Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file op…Microsoft · Internet Explorer · CVSS 7.3 · 2002-03-09 | 7.3 | 15% | 2002-03-09 |
| CVE-2006-2056Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (…Microsoft · Internet Explorer · 2006-04-26 | – | 13% | 2006-04-26 |
| CVE-2021-3401Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt progr…Bitcoin · Bitcoin · 2021-02-04 | – | 11% | 2021-02-04 |
| CVE-2001-1246PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrar…Php · Php · 2002-06-25 | – | 9.7% | 2002-06-25 |
| CVE-2021-26937encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact…Gnu · Screen · 2021-02-09 | – | 9.3% | 2021-02-09 |
| CVE-2004-0480Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to prov…Ibm · Lotus Notes · 2004-06-30 | – | 8.6% | 2004-06-30 |
| CVE-2019-12264Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.Windriver · Vxworks · 2019-08-05 | – | 8.3% | 2019-08-05 |
| CVE-2004-0411The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which…Kde · Konqueror · 2004-05-20 | – | 7.8% | 2004-05-20 |
| CVE-2024-39930The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by open…Gogs · Gogs · CVSS 9.9 · 2024-07-04 | 9.9 | 7.7% | 2024-07-04 |
| CVE-2021-38112In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium…Amazon · Aws Workspaces · 2021-09-22 | – | 7.5% | 2021-09-22 |
| CVE-2025-68144mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local filesmodelcontextprotocol · servers · CVSS 6.3 · 2025-12-17 | 6.3 | 7.2% | 2025-12-17 |
| CVE-2022-25865Command InjectionMicrosoft · workspace-tools · CVSS 8.1 · 2022-05-13 | 8.1 | 6.7% | 2022-05-13 |
| CVE-2004-0489Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option o…Apple · Mac Os X · 2004-05-28 | – | 6.7% | 2004-05-28 |
| CVE-2020-35136Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload…Dolibarr · Dolibarr Erp/crm · 2020-12-23 | – | 6.6% | 2020-12-23 |
| CVE-2006-3015Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or…Winscp · Winscp · 2006-06-14 | – | 6.5% | 2006-06-14 |
| CVE-2021-46850myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute a…Vestacp · Control Panel · CVSS 7.2 · 2022-10-24 | 7.2 | 6.4% | 2022-10-24 |
| CVE-2020-14421aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen.Aapanel · Aapanel · 2020-06-18 | – | 6.0% | 2020-06-18 |
| CVE-2018-20234There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker wi…Atlassian · Sourcetree for macOS · 2019-03-08 | – | 5.9% | 2019-03-08 |
| CVE-2019-3931Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote…Crestron · Crestron AirMedia · 2019-04-30 | – | 5.8% | 2019-04-30 |
| CVE-2026-42266JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.jupyterlab · jupyterlab · CVSS 8.8 · 2026-05-13 | 8.8 | 5.7% | 2026-05-13 |
| CVE-2022-30284In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments). NOTE: the vendor bel…Python-Libnmap Project · Python-Libnmap · CVSS 9 · 2022-05-04 | 9.0 | 5.6% | 2022-05-04 |
| CVE-2019-11582An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution throu…Atlassian · Sourcetree for Windows · 2019-06-14 | – | 4.9% | 2019-06-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.