229 matches found
Local File Inclusion (LFI)
symfony/runtime is vulnerable to Local File Inclusion LFI. The vulnerability is due to improper handling of the argv values in non-SAPI PHP runtimes, where the registerargvargc directive is set to on, allowing attackers to craft query strings that modify the environment or debug settings used by...
DEBIAN-CVE-2024-50340
symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...
Composer PHAR Arbitrary Command Execution
The vulnerability of the composer.phar file of the PHP Composer dependency manager is related to the registerargcargv function in php.ini. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2024-29895
Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when "registerargcargv" option of PHP is "On". In "cmdrealtime.php" line 119, the "$polleri...
SUSE SLES15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2024:1169-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1169-1 advisory. - CVE-2024-28085: Properly neutralize escape sequences in wall. bsc1221831 Tenable has extracted the preceding description block directly fr...
K000139140: util-linux vulnerability CVE-2024-28085
Security Advisory Description wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not...
CVE-2024-28085: Improper Neutralization of Escape, Meta, or Control Sequences
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...
CVE-2024-28085
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...
CVE-2024-28085
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked. There may be plausible...
DEBIAN-CVE-2023-6246
A heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name the basename of...
UBUNTU-CVE-2023-43655
Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has registerargcargv enabled in php.ini. Versions 2.6.4, 2.2.22 an...
CVE-2023-43655
Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has registerargcargv enabled in php.ini. Versions 2.6.4, 2.2.22 an...
SUSE CVE-2008-5983
Untrusted search path vulnerability in the PySysSetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv0 argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse...
Fortinet FortiClient nanomsg DoS
The vulnerability of the nanomsg socket library in the Fortinet FortiClient for Linux security solution is related to writing beyond the buffer boundaries during the processing of the argv array. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...
PT-2025-8192
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the execution of commands with empty argv. The issue is described as forcing a single empty string when argv is empty...
PT-2022-29560
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the handling of empty argv in the exec function. It is noted that the actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-29866
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the exec function in the Linux Kernel, where it forces a single empty string when argv is empty. The actual impact and attack plausibility have not yet been proven...
PT-2022-30391
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the exec function in the Linux Kernel, where it forces a single empty string when argv is empty. The actual impact and attack plausibility have not yet been proven...
PT-2022-30174
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the exec function handling of empty argv. It has been noted in an automated ID to aid in the discovery of potential security vulnerabilities, though the actual impact...
