← All weakness types
OS Command Injection
CWE-786,044 vulnerabilities are classified as OS Command Injection (CWE-78). The most exploitable are shown first (by EPSS), each with its CVSS score, exploit-prediction, CISA KEV status, and available fix.
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2021-1498 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2014-6271 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2019-16920 | Critical | 9.8 | 100% | KEV | - |
| CVE-2022-44877 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2020-8515 | Critical | 9.8 | 100% | KEV | - |
| CVE-2020-9054 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2024-4577 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2024-45519 | Critical | 10.0 | 100% | KEV | Fix |
| CVE-2020-25506 | Critical | 9.8 | 100% | KEV | - |
| CVE-2019-10149 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2018-10562 | Critical | 9.8 | 100% | KEV + Ransom | - |
| CVE-2014-7169 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2022-30525 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2021-1497 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2022-29303 | Critical | 9.8 | 100% | KEV | - |
| CVE-2021-36260 | Critical | 9.8 | 100% | KEV | - |
| CVE-2021-35394 | Critical | 9.8 | 100% | KEV | - |
| CVE-2022-46169 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2019-15107 | Critical | 9.8 | 100% | KEV + Ransom | - |
| CVE-2019-0232 | High | 8.1 | 100% | - | - |
| CVE-2014-6278 | High | 8.8 | 100% | KEV | Fix |
| CVE-2022-37061 | Critical | 9.8 | 100% | - | - |
| CVE-2025-48703 | Critical | 9.0 | 100% | KEV | Fix |
| CVE-2020-16846 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2023-28771 | Critical | 9.8 | 99% | KEV | Fix |
| CVE-2022-36804 | High | 8.8 | 99% | KEV | Fix |
| CVE-2020-11978 | High | 8.8 | 99% | KEV | Fix |
| CVE-2020-7247 | Critical | 9.8 | 99% | KEV | Fix |
| CVE-2019-3929 | Critical | 9.8 | 99% | KEV | Fix |
| CVE-2026-10520 | Critical | 10.0 | 99% | KEV | Fix |
| CVE-2019-11539 | High | 7.2 | 99% | KEV + Ransom | - |
| CVE-2019-5736 | High | 8.6 | 99% | - | Fix |
| CVE-2024-50603 | Critical | 10.0 | 99% | KEV | Fix |
| CVE-2024-9463 | High | 7.5 | 98% | KEV | Fix |
| CVE-2020-15920 | Critical | 9.8 | 98% | - | - |
| CVE-2024-12987 | High | 7.3 | 98% | KEV | - |
| CVE-2023-25280 | Critical | 9.8 | 98% | KEV | - |
| CVE-2020-1956 | High | 8.8 | 98% | KEV | - |
| CVE-2022-2024 | Critical | 9.8 | 98% | - | Fix |
| CVE-2021-45382 | Critical | 9.8 | 98% | KEV | - |
| CVE-2019-16662 | Critical | 9.8 | 98% | - | - |
| CVE-2021-36380 | Critical | 9.8 | 98% | KEV | Fix |
| CVE-2024-10914 | High | 8.1 | 97% | - | - |
| CVE-2019-7256 | Critical | 9.8 | 97% | KEV | - |
| CVE-2019-20500 | High | 7.8 | 97% | KEV | - |
| CVE-2021-37344 | Critical | 9.8 | 97% | - | Fix |
| CVE-2021-22502 | Critical | 9.8 | 97% | KEV | - |
| CVE-2020-25223 | Critical | 9.8 | 97% | KEV | Fix |
| CVE-2019-20499 | High | 7.8 | 97% | - | - |
| CVE-2019-9194 | Critical | 9.8 | 97% | - | Fix |
| CVE-2018-6530 | Critical | 9.8 | 97% | KEV + Ransom | - |
| CVE-2020-28188 | Critical | 9.8 | 97% | - | - |
| CVE-2026-34197 | High | 8.8 | 96% | KEV | Fix |
| CVE-2011-2523 | Critical | 9.8 | 96% | - | - |
| CVE-2017-3506 | High | 7.4 | 96% | KEV | - |
| CVE-2019-1652 | High | 7.2 | 96% | KEV | Fix |
| CVE-2022-2068 | High | 7.3 | 96% | - | Fix |
| CVE-2020-13167 | Critical | 9.8 | 95% | - | - |
| CVE-2024-1212 | Critical | 10.0 | 95% | KEV | Fix |
| CVE-2024-51378 | Critical | 10.0 | 95% | KEV + Ransom | Fix |
| CVE-2024-9474 | High | 7.2 | 95% | KEV + Ransom | Fix |
| CVE-2021-46422 | Critical | 9.8 | 95% | - | - |
| CVE-2021-33544 | High | 7.2 | 95% | - | - |
| CVE-2024-8517 | Critical | 9.8 | 95% | - | Fix |
| CVE-2017-18368 | Critical | 9.8 | 95% | KEV | - |
| CVE-2018-1111 | High | 7.5 | 94% | - | - |
| CVE-2023-30258 | Critical | 9.8 | 94% | - | - |
| CVE-2024-2389 | Critical | 10.0 | 94% | - | Fix |
| CVE-2018-14933 | Critical | 9.8 | 94% | KEV | - |
| CVE-2020-14144 | High | 7.2 | 94% | - | - |
| CVE-2024-7120 | Medium | 6.3 | 93% | - | - |
| CVE-2022-33891 | High | 8.8 | 93% | KEV | - |
| CVE-2018-11138 | Critical | 9.8 | 92% | KEV + Ransom | - |
| CVE-2019-9193 | High | 7.2 | 92% | - | - |
| CVE-2020-13851 | High | 8.8 | 91% | - | - |
| CVE-2017-12636 | High | 7.2 | 91% | - | Fix |
| CVE-2019-20501 | High | 7.8 | 90% | - | - |
| CVE-2022-31137 | Critical | 10.0 | 90% | - | Fix |
| CVE-2021-21315 | High | 7.1 | 90% | KEV | Fix |
| CVE-2013-4983 | High | 10.0 | 90% | - | - |
| CVE-2019-12725 | Critical | 9.8 | 90% | - | - |
| CVE-2023-20273 | High | 7.2 | 90% | KEV | Fix |
| CVE-2019-17621 | Critical | 9.8 | 90% | KEV | - |
| CVE-2018-14417 | Critical | 9.8 | 90% | - | Fix |
| CVE-2018-14839 | Critical | 9.8 | 89% | KEV | - |
| CVE-2024-29972 | Critical | 9.8 | 89% | - | Fix |
| CVE-2023-47218 | Medium | 5.8 | 89% | - | Fix |
| CVE-2023-6895 | Medium | 6.3 | 89% | - | Fix |
| CVE-2024-8190 | High | 7.2 | 89% | KEV | - |
| CVE-2021-20837 | Critical | 9.8 | 88% | - | - |
| CVE-2020-35729 | Critical | 9.8 | 88% | - | - |
| CVE-2017-17411 | Critical | 9.8 | 88% | - | Fix |
| CVE-2023-40504 | Critical | 9.8 | 88% | - | - |
| CVE-2020-8605 | High | 8.8 | 88% | - | - |
| CVE-2019-11409 | High | 8.8 | 87% | - | - |
| CVE-2021-3122 | Critical | 9.8 | 87% | - | - |
| CVE-2019-16057 | Critical | 9.8 | 87% | KEV + Ransom | - |
| CVE-2018-9276 | High | 7.2 | 87% | KEV | Fix |
| CVE-1999-0067 | High | 10.0 | 87% | - | - |
| CVE-2020-13151 | Critical | 9.8 | 87% | - | Fix |
Showing the top 100 of 6,044. Browse all 6,044 in the lookup tool.