Vulnerabilities (CVE)

Filtered by CWE-150
Total 62 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25310 1 Belkin 2 Linksys Wrt160nl, Linksys Wrt160nl Firmware 2026-06-17 9.0 HIGH 8.8 HIGH
The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges via shell metacharacters in the ui_language POST parameter to the apply.cgi form endpoint. This occurs in do_upgrade_post in mini_httpd. NOTE: This vulnerability only affects products that are no longer supported by the maintaine
CVE-2020-6932 1 Blackberry 1 Qnx Software Development Platform 2026-06-17 10.0 HIGH 10.0 CRITICAL
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.