7 matches found
CVE-2018-16926
CVE-2018-16926 entry is rejected/not used; withdrawn by its CNA.
CVE-2019-16926
Flower 0.9.3 has XSS via a crafted worker name. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has ful...
CVE-2019-16926
Flower version 0.9.3 is described as having a client-side XSS via a crafted worker name (CVE-2019-16926). The affected software is Flower, a web-based Celery monitor, with the vulnerability attributed to internal backend configuration options for worker and task names, which are not user-facing. ...
DEBIAN-CVE-2017-16926
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...
CVE-2017-16926
Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker providing a source tree for Ohcount processing to execute arbitrary code as the user running Ohcount...
CVE-2017-16926
Ohcount 3.0.0 is vulnerable to a command injection via filenames containing shell metacharacters, allowing an attacker providing a source tree for processing to execute arbitrary code as the Ohcount user. Affected component: Ohcount 3.0.0; root cause: command injection through specially crafted f...