Lucene search
+L

7 matches found

OSV
OSV
•added 2020/02/14 11:10 p.m.•67 views

GHSA-C5R5-7PFH-6QG6 BibTeX-Ruby vulnerable to OS command injection

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

9.8CVSS9.7AI score0.0281EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2020/02/14 11:10 p.m.•138 views

BibTeX-Ruby vulnerable to OS command injection

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

10CVSS9.4AI score0.0281EPSS
SaveExploits1References5Affected Software1
RubySec
RubySec
•added 2020/02/14 12:00 a.m.•55 views

OS command injection in BibTeX-Ruby

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

10CVSS2.9AI score0.0281EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2020/01/22 2:15 p.m.•49 views

CVE-2019-10780

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

9.8CVSS7.4AI score
SaveExploits0References1
NVD
NVD
•added 2020/01/22 2:15 p.m.•44 views

CVE-2019-10780

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

10CVSS9.8AI score0.0281EPSS
SaveExploits1References1
Prion
Prion
•added 2020/01/22 2:15 p.m.•22 views

Command injection

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

10CVSS9.8AI score0.0281EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/22 12:00 a.m.•3 views

CVE-2019-10780: Improper Neutralization of Special Elements used in an OS Command

BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open...

10CVSS8.2AI score0.0281EPSS
SaveExploits1References2
Rows per page
Query Builder