cwe-77
Safeguard articles tagged "cwe-77" — guides, analysis, and best practices for software supply chain and application security.
30 articles
CVE-2016-20017: D-Link DSL-2750B Devices Command Injection Vulnerability
CVE-2016-20017 affects D-Link DSL-2750B Devices and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-08.
CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVE-2024-21887 affects Ivanti Connect Secure and Policy Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-10.
CVE-2024-3273: D-Link Multiple NAS Devices Command Injection Vulnerability
CVE-2024-3273 affects D-Link Multiple NAS Devices and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-04-11.
CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability
CVE-2024-3400 affects Palo Alto Networks PAN-OS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-04-12.
CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
CVE-2024-9380 affects Ivanti Cloud Services Appliance (CSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-09.
CVE-2024-9474: Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
CVE-2024-9474 affects Palo Alto Networks PAN-OS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-18.
CVE-2024-12356: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
CVE-2024-12356 affects BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-12-19.
CVE-2023-20118: Cisco Small Business RV Series Routers Command Injection Vulnerability
CVE-2023-20118 affects Cisco Small Business RV Series Routers and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-03.
CVE-2023-33538: TP-Link Multiple Routers Command Injection Vulnerability
CVE-2023-33538 affects TP-Link Multiple Routers and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-06-16.
CVE-2016-10033: PHPMailer Command Injection Vulnerability
CVE-2016-10033 affects PHP PHPMailer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-07-07.
CVE-2020-25079: D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
CVE-2020-25079 affects D-Link DCS-2530L and DCS-2670L Devices and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-08-05.
CVE-2025-10035: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
CVE-2025-10035 affects Fortra GoAnywhere MFT and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-09-29.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.