Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
•added 2022/12/05 12:00 a.m.•43 views

Debian DSA-5294-1 : jhead - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5294 advisory. Jhead, a tool for manipulating EXIF data embedded in JPEG images, allowed attackers to execute arbitrary OS commands by placing them in a JPEG filename and then...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits2References8
Veracode
Veracode
•added 2022/11/23 5:13 a.m.•27 views

OS Command Injection

Jhead is vulnerable to os command injection. An attacker is able to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

7.8CVSS8.1AI score0.00466EPSS
SaveExploits1References12Affected Software1
NVD
NVD
•added 2022/10/17 6:15 p.m.•21 views

CVE-2022-41751

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

7.8CVSS0.00466EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•3 views

CVE-2022-41751: Improper Neutralization of Special Elements used in an OS Command

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits1References3
Mend
Mend
•added 2022/10/17 12:00 a.m.•5 views

CVE-2022-41751

Jhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG filename and then using the regeneration -rgt50 option...

8.5CVSS0.00466EPSS
SaveExploits1References15
Rows per page
Query Builder